diff --git a/src/zammad/install-service.sh b/src/zammad/install-service.sh index e7587ac..67302dc 100644 --- a/src/zammad/install-service.sh +++ b/src/zammad/install-service.sh @@ -30,6 +30,7 @@ cat << EOF >>/etc/hosts 0.0.0.0 geoip.elastic.co EOF +# Java set startup environment mkdir -p /etc/elasticsearch/jvm.options.d cat << EOF >>/etc/elasticsearch/jvm.options.d/msmx-size.options # INFO: https://www.elastic.co/guide/en/elasticsearch/reference/master/advanced-configuration.html#set-jvm-heap-size @@ -97,13 +98,17 @@ server { # https://webdock.io/en/docs/how-guides/security-guides/how-to-configure-security-headers-in-nginx-and-apache # add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload'; - add_header Content-Security-Policy "default-src 'self'; font-src *;img-src * data:; script-src *; style-src *"; - add_header Referrer-Policy "strict-origin"; - add_header X-Frame-Options DENY; - add_header X-Content-Type-Options nosniff; - add_header X-XSS-Protection "1; mode=block"; - add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()"; - + add_header Content-Security-Policy "default-src 'self'; font-src *;img-src * data:; script-src *; style-src *"; + add_header Referrer-Policy "strict-origin"; + add_header X-Frame-Options DENY; + add_header X-Content-Type-Options nosniff; + add_header X-XSS-Protection "1; mode=block"; + add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()"; + + location = /robots.txt { + access_log off; log_not_found off; + } + location = /favicon.ico { access_log off; log_not_found off; }