Files
penpot/docker
David Barragán Merino 3cdf86a253 🐳 Apply the common security headers to the external locations
The three locations of nginx-external-locations.conf define their own add_header directives, which under nginx's inheritance rules discards every add_header from the enclosing server block. They were therefore served without any of the four security headers already shipped, and would equally have been served without the new CSP and HSTS ones.

Include the common file in all three, which is the pattern the development environment already follows for the equivalent locations.

Signed-off-by: David Barragán Merino <david.barragan@kaleidos.net>
2026-09-15 13:41:51 +02:00
..
2024-04-19 01:29:13 +02:00