05f03a1ca1
Some checks failed
Code Style / Laravel Pint (push) Failing after 2s
Code Style / PHP CodeSniffer (push) Failing after 1s
Static Analysis / PHPStan (push) Failing after 1s
Static Analysis / Psalm (push) Failing after 2s
Static Analysis / Security Audit (push) Failing after 1s
Static Analysis / PHP Syntax Check (push) Failing after 1s
Tests / PHP 8.2 - Laravel 11.* (push) Failing after 2s
Tests / PHP 8.3 - Laravel 11.* (push) Failing after 2s
Tests / PHP 8.4 - Laravel 11.* (push) Failing after 2s
Tests / PHP 8.4 - Laravel 12.* (push) Failing after 2s
Tests / PHP 8.3 - Laravel 12.* (push) Failing after 2s
Move production Docker files from core/cli to their proper home: - Dockerfile.app: PHP 8.3-FPM with Laravel extensions - Dockerfile.web: nginx reverse proxy - docker-compose.prod.yml: full stack (app, web, horizon, scheduler, mcp, redis, galera) - nginx/: default.conf + security-headers.conf - php/: opcache.ini + php-fpm.conf Co-Authored-By: Virgil <virgil@lethean.io>
6 lines
345 B
Text
6 lines
345 B
Text
# Security headers for Host UK
|
|
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
add_header X-XSS-Protection "1; mode=block" always;
|
|
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
|
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=()" always;
|