From 3eb4827744fbd43f4eed34e6627ee5175f82b544 Mon Sep 17 00:00:00 2001 From: mandalore Date: Thu, 28 May 2026 17:58:05 -0500 Subject: [PATCH] Fix mobile nav visibility and stale stats link; add nginx security headers to config Co-Authored-By: Claude Sonnet 4.6 --- kingmaker.gateway-gamers.net.conf | 36 +++++++++++++++++++++++++++++++ public/header.html | 4 ++-- 2 files changed, 38 insertions(+), 2 deletions(-) create mode 100644 kingmaker.gateway-gamers.net.conf diff --git a/kingmaker.gateway-gamers.net.conf b/kingmaker.gateway-gamers.net.conf new file mode 100644 index 0000000..5717f4d --- /dev/null +++ b/kingmaker.gateway-gamers.net.conf @@ -0,0 +1,36 @@ +server { + listen 80; + listen [::]:80; + server_name kingmaker.gateway-gamers.net; + return 301 https://$host$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + server_name kingmaker.gateway-gamers.net; + + root /var/www/domains/gateway-gamers.net/kingmaker; + index index.html; + + # SSL — managed by Certbot + # ssl_certificate /etc/letsencrypt/live/kingmaker.gateway-gamers.net/fullchain.pem; + # ssl_certificate_key /etc/letsencrypt/live/kingmaker.gateway-gamers.net/privkey.pem; + # include /etc/letsencrypt/options-ssl-nginx.conf; + # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + + # Hide nginx version + server_tokens off; + + # Security headers + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; + add_header X-Content-Type-Options "nosniff" always; + add_header X-Frame-Options "SAMEORIGIN" always; + add_header Referrer-Policy "strict-origin-when-cross-origin" always; + add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always; + add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self'; frame-src https://docs.google.com; img-src 'self' data:;" always; + + location / { + try_files $uri $uri/ =404; + } +} diff --git a/public/header.html b/public/header.html index 11bb085..777e8b4 100644 --- a/public/header.html +++ b/public/header.html @@ -26,7 +26,7 @@
-
+