mirror of
https://github.com/seanmorley15/AdventureLog.git
synced 2025-07-19 04:49:37 +02:00
refactor: improve formatting and organization in nginx configuration
This commit is contained in:
parent
b50447b1a2
commit
c159e176b3
1 changed files with 14 additions and 19 deletions
|
@ -1,16 +1,12 @@
|
|||
worker_processes 1;
|
||||
|
||||
events {
|
||||
worker_connections 1024;
|
||||
}
|
||||
|
||||
http {
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
sendfile on;
|
||||
keepalive_timeout 65;
|
||||
|
||||
client_max_body_size 100M;
|
||||
|
||||
upstream django {
|
||||
|
@ -33,23 +29,22 @@ http {
|
|||
alias /code/staticfiles/;
|
||||
}
|
||||
|
||||
# Internal redirect path for protected media
|
||||
location /protectedMedia/ {
|
||||
internal;
|
||||
alias /code/media/;
|
||||
try_files $uri =404;
|
||||
}
|
||||
|
||||
# Special headers for PDF responses under /protectedMedia/
|
||||
# Special handling for PDF files with CSP headers
|
||||
location ~ ^/protectedMedia/.*\.pdf$ {
|
||||
internal;
|
||||
alias /code/media/;
|
||||
try_files $uri =404;
|
||||
|
||||
add_header Content-Security-Policy "default-src 'self'; script-src 'none'; object-src 'none'; base-uri 'none'" always;
|
||||
add_header X-Content-Type-Options nosniff always;
|
||||
add_header X-Frame-Options SAMEORIGIN always;
|
||||
add_header Content-Disposition "inline" always;
|
||||
}
|
||||
|
||||
# General protected media files (non-PDF)
|
||||
location /protectedMedia/ {
|
||||
internal;
|
||||
alias /code/media/;
|
||||
try_files $uri =404;
|
||||
}
|
||||
}
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue