2023-04-20 21:13:47 +00:00
|
|
|
kind: ConfigMap
|
|
|
|
|
apiVersion: v1
|
|
|
|
|
metadata:
|
|
|
|
|
name: nginx-cdn-configmap
|
|
|
|
|
namespace: default
|
|
|
|
|
data:
|
|
|
|
|
nginx.conf: |
|
|
|
|
|
events {}
|
|
|
|
|
http {
|
|
|
|
|
server {
|
2023-04-21 05:10:17 +00:00
|
|
|
listen 6544 backlog=16384;
|
2023-04-20 21:13:47 +00:00
|
|
|
root /var/www/html;
|
|
|
|
|
# security headers
|
|
|
|
|
add_header X-XSS-Protection "1; mode=block" always;
|
|
|
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
|
|
|
add_header Referrer-Policy "no-referrer-when-downgrade" always;
|
|
|
|
|
add_header Content-Security-Policy "default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';" always;
|
|
|
|
|
add_header Permissions-Policy "interest-cohort=()" always;
|
|
|
|
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
|
|
|
|
|
|
|
|
|
location / {
|
|
|
|
|
root /data;
|
|
|
|
|
sendfile on;
|
|
|
|
|
sendfile_max_chunk 128m;
|
|
|
|
|
tcp_nopush on;
|
|
|
|
|
tcp_nodelay on;
|
|
|
|
|
keepalive_timeout 65;
|
|
|
|
|
limit_except GET HEAD { deny all; }
|
|
|
|
|
#autoindex on;
|
|
|
|
|
default_type application/octet-stream;
|
|
|
|
|
charset UTF-8;
|
|
|
|
|
|
|
|
|
|
fancyindex on;
|
|
|
|
|
fancyindex_exact_size off; # human readable file sizes
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
