Add Hub update script and document hardening changes

Co-Authored-By: Oz <oz-agent@warp.dev>
This commit is contained in:
Raghav
2026-04-17 10:17:55 +05:30
parent a51dcf6115
commit 69b7f7a849
4 changed files with 197 additions and 1 deletions

View File

@ -1,4 +1,6 @@
# nginx/nginx.conf
server_tokens off;
server {
listen 80;
server_name nxt.bhatfamily.in;
@ -20,9 +22,12 @@ server {
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1d;
ssl_session_tickets off;
client_max_body_size 10240M;
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
location / {
proxy_pass http://nextcloud-app:80;
@ -35,5 +40,6 @@ server {
proxy_set_header X-Forwarded-Port 8446;
proxy_read_timeout 3600;
proxy_send_timeout 3600;
proxy_hide_header X-Powered-By;
}
}