G⌬RBE/Posts/Nginx Security/Nginx Security8 October 2024·16 words·1 min· DraftNginx Webserver Security Tls LogTable of ContentsHSTSContent Security PolicyHSTS #add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; Content Security Policy #add_header Content-Security-Policy "default-src https: 'unsafe-inline'" always;