about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorFranz Pletz <fpletz@fnordicwalking.de>2020-02-26 17:37:38 +0000
committerGitHub <noreply@github.com>2020-02-26 17:37:38 +0000
commit2dff70f0f3016d675852dc05bfbfe572c2628d0c (patch)
treeb91b0a528d502509d99b74e7b5b7529a90785a8a /nixos
parent0b919c249f6c23937fc7772ced75a7cea5064e3c (diff)
parent119a7aae504aea03654d39c68666e1cd4e28bd56 (diff)
downloadnixlib-2dff70f0f3016d675852dc05bfbfe572c2628d0c.tar
nixlib-2dff70f0f3016d675852dc05bfbfe572c2628d0c.tar.gz
nixlib-2dff70f0f3016d675852dc05bfbfe572c2628d0c.tar.bz2
nixlib-2dff70f0f3016d675852dc05bfbfe572c2628d0c.tar.lz
nixlib-2dff70f0f3016d675852dc05bfbfe572c2628d0c.tar.xz
nixlib-2dff70f0f3016d675852dc05bfbfe572c2628d0c.tar.zst
nixlib-2dff70f0f3016d675852dc05bfbfe572c2628d0c.zip
Merge pull request #80981 from bachp/nextcloud-x-frame-warning
nixos/nextcloud: prevent warning about missing X-Frame-Option
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/web-apps/nextcloud.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/modules/services/web-apps/nextcloud.nix b/nixos/modules/services/web-apps/nextcloud.nix
index d79f2bb735fa..53bd518d857e 100644
--- a/nixos/modules/services/web-apps/nextcloud.nix
+++ b/nixos/modules/services/web-apps/nextcloud.nix
@@ -533,6 +533,7 @@ in {
                 add_header X-Robots-Tag none;
                 add_header X-Download-Options noopen;
                 add_header X-Permitted-Cross-Domain-Policies none;
+                add_header X-Frame-Options sameorigin;
                 add_header Referrer-Policy no-referrer;
                 access_log off;
               '';
@@ -547,6 +548,7 @@ in {
               add_header X-Robots-Tag none;
               add_header X-Download-Options noopen;
               add_header X-Permitted-Cross-Domain-Policies none;
+              add_header X-Frame-Options sameorigin;
               add_header Referrer-Policy no-referrer;
               add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
               error_page 403 /core/templates/403.php;