From 47d2628bc053280da165aaf43576b49c8de7114f Mon Sep 17 00:00:00 2001 From: Jarold Wong Date: Wed, 3 Apr 2024 17:02:37 -0700 Subject: [PATCH] add https --- nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nginx.conf b/nginx.conf index 8f3e80da6..bb5bcbb20 100644 --- a/nginx.conf +++ b/nginx.conf @@ -39,7 +39,7 @@ http { index index.html index.htm; add_header Cache-Control "no-cache"; - add_header Content-Security-Policy "default-src 'self'; connect-src 'api.ipa.ucdavis.edu'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com"; + add_header Content-Security-Policy "default-src 'self'; connect-src 'https://api.ipa.ucdavis.edu'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; add_header X-Content-Type-Options "nosniff";