[ENHANCEMENTS] Add Security Headers // Presets // Checkboxes #163
Description
Im not Firm with Github , so pls be kind to me =D
Default Security Headers would be nice to implement // maybe let users choice trough checkboxes wich headers should be enabled for proxyhost xyz + empty fields to maybe enter own security headers like content security polices etc.
or some presets that user can just click trough "checkboxes".
security headers on npm are buggy and needed to set trough advanced / location settings. - no problem, but annoying haha -
so have an working alternative would be +1
like:
client_body_buffer_size (value);
proxy_read_timeout (value)s;
client_max_body_size (value);
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect off;
proxy_buffering off;
proxy_request_buffering off;
http forward, websocket etc etc.
my jellyfin for example:
client_max_body_size 20M;
add_header Strict-Transport-Security "max-age=31536000" always;
add_header X-XSS-Protection "0"; # Do NOT enable. This is obsolete/dangerous
add_header X-Content-Type-Options "nosniff";
add_header Permissions-Policy "accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), serial=(), sync-xhr=(), usb=(), xr-spatial-tracking=()" always;
location / {
# Proxy main Jellyfin traffic
proxy_pass http://$jellyfin:8096;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Protocol $scheme;
proxy_set_header X-Forwarded-Host $http_host;
# Disable buffering when the nginx proxy gets very resource heavy upon streaming
proxy_buffering off;
}
location /socket {
# Proxy Jellyfin Websockets traffic
proxy_pass http://$jellyfin:8096;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Protocol $scheme;
proxy_set_header X-Forwarded-Host $http_host;
}
have this as checkboxes and maybe advanced field with a field to insert them manually would be <3 and i will switch to zoraxy.
edit -- dk how to insert an code block, without let hashtags to be written fat.^^