Разработана первая версия приложений

codebase/backend/nginx/snippets/proxy-common.conf

@@ -0,0 +1,16 @@
+proxy_http_version 1.1;
+proxy_set_header Host $host;
+proxy_set_header X-Real-IP $remote_addr;
+proxy_set_header X-Forwarded-For $remote_addr;
+proxy_set_header X-Forwarded-Proto https;
+proxy_set_header X-Forwarded-Host $host;
+proxy_set_header X-Forwarded-Port 443;
+proxy_set_header X-Request-ID $edge_request_id;
+proxy_set_header traceparent $http_traceparent;
+proxy_hide_header X-Powered-By;
+proxy_hide_header Server;
+add_header X-Request-ID $edge_request_id always;
+include /etc/nginx/generated/security-headers.conf;
+proxy_connect_timeout 3s;
+proxy_send_timeout 30s;
+proxy_read_timeout 30s;

codebase/backend/nginx/snippets/security-headers.conf

@@ -0,0 +1,5 @@
+add_header X-Content-Type-Options "nosniff" always;
+add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
+add_header Cross-Origin-Opener-Policy "same-origin" always;
+add_header X-Frame-Options "DENY" always;