1
0
Fork 0
mirror of https://github.com/seanmorley15/AdventureLog.git synced 2025-07-19 04:49:37 +02:00

refactor: improve formatting and organization in nginx configuration

This commit is contained in:
Sean Morley 2025-05-31 21:54:45 -04:00
parent b50447b1a2
commit c159e176b3

View file

@ -1,16 +1,12 @@
worker_processes 1;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;
client_max_body_size 100M;
upstream django {
@ -33,23 +29,22 @@ http {
alias /code/staticfiles/;
}
# Internal redirect path for protected media
location /protectedMedia/ {
internal;
alias /code/media/;
try_files $uri =404;
}
# Special headers for PDF responses under /protectedMedia/
# Special handling for PDF files with CSP headers
location ~ ^/protectedMedia/.*\.pdf$ {
internal;
alias /code/media/;
try_files $uri =404;
add_header Content-Security-Policy "default-src 'self'; script-src 'none'; object-src 'none'; base-uri 'none'" always;
add_header X-Content-Type-Options nosniff always;
add_header X-Frame-Options SAMEORIGIN always;
add_header Content-Disposition "inline" always;
}
# General protected media files (non-PDF)
location /protectedMedia/ {
internal;
alias /code/media/;
try_files $uri =404;
}
}
}