zelo72/documentation
1
0
Fork 0
mirror of https://github.com/mastodon/documentation synced 2025-04-11 22:56:17 +02:00
Code Issues 6 Releases Wiki Activity

Merge pull request #29 from jemus42/patch-1

Browse Source 
Add info about already set HTTP headers
This commit is contained in:
wxcafé 2017-04-14 02:07:34 +02:00 committed by GitHub
commit bdf7d53c9a
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
Running-Mastodon/Production-guide.md
View File

@ -1,6 +1,15 @@
Production guide
================
The following HTTP readers are already set internally and should not be set again:
```
'Server' => 'Mastodon',
'X-Frame-Options' => 'DENY',
'X-Content-Type-Options' => 'nosniff',
'X-XSS-Protection'       => '1; mode=block',
```
## Nginx
Regardless of whether you go with the Docker approach or not, here is an example Nginx server configuration: