upgraded configs

2026-09-22 16:30:35 +02:00
parent 57ddd4f6a2
commit e0c424286f
3 changed files with 30 additions and 2 deletions
@@ -1,6 +1,26 @@
 server {
    listen 8081;
    server_name localhost;
+    server_tokens off;

    root /usr/share/nginx/html;
-}
+
+    # Compression
+    gzip on;
+    gzip_types text/css application/javascript application/json image/svg+xml;
+
+    # Security headers
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+
+    # Never serve dotfiles (.git, .dockerignore, ...)
+    location ~ /\. {
+        deny all;
+    }
+
+    # Images and PDFs rarely change. HTML, JS, CSS and JSON are not fingerprinted,
+    # so they keep nginx's default (ETag / Last-Modified revalidation).
+    location ~* \.(jpg|png|pdf)$ {
+        expires 30d;
+    }
+}