crans
/
nixos
mirror of https://gitlab.crans.org/nounous/nixos
19
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

nextcloud: fix headers [add_header_redefinition]

nextcloud
Pyjacpp 2026-08-03 19:39:57 +02:00
parent 932e7ecc17
commit eafe7b8e0b
No known key found for this signature in database
GPG Key ID: ED479A5A26930939
1 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
hosts/vm/nextcloud/nextcloud.nix
View File

@ -54,11 +54,24 @@
}; };
# Activation CORS pour récuppérer les agendas depuis le wiki # Activation CORS pour récuppérer les agendas depuis le wiki
# On est obligé de répéter les headers communs de sécurité car ils ne sont pas au même niveau
# https://github.com/yandex/gixy/blob/master/docs/en/plugins/addheaderredefinition.md
services.nginx.virtualHosts.${config.services.nextcloud.hostName}.locations."~* /remote.php/dav/public-calendars/[a-z]+\?export".extraConfig = services.nginx.virtualHosts.${config.services.nextcloud.hostName}.locations."~* /remote.php/dav/public-calendars/[a-z]+\?export".extraConfig =
'' let
base_headers = ''
add_header X-Content-Type-Options nosniff;
add_header X-Robots-Tag noindex, nofollow;
add_header X-Permitted-Cross-Domain-Policies none;
add_header X-Frame-Options sameorigin;
add_header Referrer-Policy no-referrer;
add_header 'Access-Control-Allow-Origin' 'https://mediawiki.crans.org' always; add_header 'Access-Control-Allow-Origin' 'https://mediawiki.crans.org' always;
add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS' always; add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS' always;
'';
in
''
${base_headers}
if ($request_method = 'OPTIONS') { if ($request_method = 'OPTIONS') {
${base_headers}
add_header 'Access-Control-Max-Age' 86400; add_header 'Access-Control-Max-Age' 86400;
add_header 'Content-Type' 'text/plain; charset=utf-8'; add_header 'Content-Type' 'text/plain; charset=utf-8';
add_header 'Content-Length' 0; add_header 'Content-Length' 0;