host/Proxmox-VPS-Panel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Обновление файла

Browse Source
This commit is contained in:
host
2026-07-25 03:37:06 +03:00
parent e24fcbac3a
commit ddc8dc1db5
1 changed files with 3 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/nginx.conf
+3 -11
View File
@@ -10,10 +10,8 @@ server {
add_header X-Content-Type-Options "nosniff" always; add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer" always; add_header Referrer-Policy "no-referrer" always;
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always; add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
# CSP разрешает только свои ресурсы + Google Fonts + ws к backend. # CSP: только свои ресурсы + Google Fonts для шрифтов.
# self + 'unsafe-inline' для стилей нужен Vite-сборке. noVNC загружается add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self'; frame-ancestors 'self';" always;
# как npm-пакет, поэтому внешние CDN больше не нужны.
add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' ws: wss:; frame-ancestors 'self';" always;
location / { location / {
try_files $uri /index.html; try_files $uri /index.html;
@@ -25,11 +23,5 @@ server {
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_http_version 1.1;
# Для websocket-прокси VNC-консоли.
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_read_timeout 86400s;
proxy_send_timeout 86400s;
} }
} }