Selective route permission to use embeds, fixes #322 in a better way (#364)

pull/365/head
Rigel Kent 2018-03-20 17:28:41 +01:00 committed by Chocobozzz
parent 040d455178
commit d40cd86bf5
1 changed files with 6 additions and 0 deletions

View File

@ -38,6 +38,7 @@ server {
# resolver_timeout 5s; # resolver_timeout 5s;
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"; add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block"; add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none; add_header X-Robots-Tag none;
@ -103,6 +104,11 @@ server {
alias /var/www/peertube/storage/videos; alias /var/www/peertube/storage/videos;
} }
# Allow embeds
location /videos/embed {
proxy_hide_header X-Frame-Options;
}
# Websocket tracker # Websocket tracker
location /tracker/socket { location /tracker/socket {
# Peers send a message to the tracker every 15 minutes # Peers send a message to the tracker every 15 minutes