jandieman/searxng-docker
2
0
Fork 0
mirror of https://github.com/searxng/searxng-docker.git synced 2026-07-26 18:01:35 +00:00
Code Issues Projects Releases Wiki Activity

merge upstream changes

Browse Source
This commit is contained in:
Ivan Gabaldon
2025-01-03 14:59:40 +01:00
parent a99c06801d
commit cf3b060f31
1 changed files with 19 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
Caddyfile
View File

@@ -33,20 +33,21 @@ encode zstd gzip
path /stats/checker path /stats/checker
} }
@static { @search {
path /static/* path /search
} }
@imageproxy { @imageproxy {
path /image_proxy path /image_proxy
} }
header { @static {
# Force clients to use HTTPS path /static/*
Strict-Transport-Security "max-age=31536000" }
# Prevent MIME type sniffing from the declared Content-Type header {
X-Content-Type-Options "nosniff" # CSP (https://content-security-policy.com)
Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self' https://github.com/searxng/searxng/issues/new; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src * data:; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com;"
# Disable some browser features # Disable some browser features
Permissions-Policy "accelerometer=(),camera=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),payment=(),usb=()" Permissions-Policy "accelerometer=(),camera=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),payment=(),usb=()"
@@ -54,6 +55,12 @@ header {
# Set referrer policy # Set referrer policy
Referrer-Policy "no-referrer" Referrer-Policy "no-referrer"
# Force clients to use HTTPS
Strict-Transport-Security "max-age=31536000"
# Prevent MIME type sniffing from the declared Content-Type
X-Content-Type-Options "nosniff"
# X-Robots-Tag (comment to allow site indexing) # X-Robots-Tag (comment to allow site indexing)
X-Robots-Tag "noindex, noarchive, nofollow" X-Robots-Tag "noindex, noarchive, nofollow"
@@ -67,13 +74,11 @@ header @api {
} }
route { route {
# Caching # Cache policy
header Cache-Control "no-cache, no-store" header Cache-Control "max-age=0, no-store"
header @static Cache-Control "public, max-age=31536000" header @search Cache-Control "max-age=5, private"
header @imageproxy Cache-Control "max-age=604800, public"
# CSP (https://content-security-policy.com) header @static Cache-Control "max-age=31536000, public, immutable"
header Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self' https://github.com/searxng/searxng/issues/new; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src 'self' data: https://*.tile.openstreetmap.org; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com"
header @imageproxy Content-Security-Policy "default-src 'none'; img-src 'self' data:"
} }
# SearXNG (uWSGI) # SearXNG (uWSGI)