Replace block add_header to location ds-vpath

ONLYOFFICE · May 24, 2023 · 6c92335 · 6c92335
1 parent fa2a9a9
commit 6c92335
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/nginx.conf b/nginx.conf
@@ -43,13 +43,6 @@ http {
     server {
         listen 80;
 
-        add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
-        add_header X-Content-Type-Options nosniff;
-        add_header X-XSS-Protection "1; mode=block";
-        add_header X-Robots-Tag none;
-        add_header X-Download-Options noopen;
-        add_header X-Permitted-Cross-Domain-Policies none;
-
         client_max_body_size 10G;
         fastcgi_buffers 64 4K;
 
@@ -66,6 +59,13 @@ http {
         }
 
         location ~* ^/ds-vpath/ {
+            add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
+            add_header X-Content-Type-Options nosniff;
+            add_header X-XSS-Protection "1; mode=block";
+            add_header X-Robots-Tag none;
+            add_header X-Download-Options noopen;
+            add_header X-Permitted-Cross-Domain-Policies none;
+
             rewrite /ds-vpath/(.*) /$1 break;
             proxy_pass http://onlyoffice-document-server;
             proxy_redirect off;