From ccca06915fffaf476661b33d9a01afabcfef9688 Mon Sep 17 00:00:00 2001 From: Oli Date: Fri, 24 Mar 2023 15:34:18 +0000 Subject: [PATCH] update X-Robots-Tag to noindex, nofollow --- roles/webserver/templates/conf.d/cloud.conf.j2 | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/roles/webserver/templates/conf.d/cloud.conf.j2 b/roles/webserver/templates/conf.d/cloud.conf.j2 index eedc8bd..2d64b44 100644 --- a/roles/webserver/templates/conf.d/cloud.conf.j2 +++ b/roles/webserver/templates/conf.d/cloud.conf.j2 @@ -59,13 +59,13 @@ server { client_body_buffer_size 512k; # HTTP response headers borrowed from Nextcloud `.htaccess` - add_header Referrer-Policy "no-referrer" always; - add_header X-Content-Type-Options "nosniff" always; - add_header X-Download-Options "noopen" always; - add_header X-Frame-Options "SAMEORIGIN" always; - add_header X-Permitted-Cross-Domain-Policies "none" always; - add_header X-Robots-Tag "none" always; - add_header X-XSS-Protection "1; mode=block" always; + add_header Referrer-Policy "no-referrer" always; + add_header X-Content-Type-Options "nosniff" always; + add_header X-Download-Options "noopen" always; + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-Permitted-Cross-Domain-Policies "none" always; + add_header X-Robots-Tag "noindex, nofollow" always; + add_header X-XSS-Protection "1; mode=block" always; # Remove X-Powered-By, which is an information leak fastcgi_hide_header X-Powered-By;