bida/Mastodon-documentation
6
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Merge pull request #29 from jemus42/patch-1

Browse source 
Add info about already set HTTP headers
This commit is contained in:
wxcafé 2017-04-14 02:07:34 +02:00 committed by GitHub
commit bdf7d53c9a
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
Running-Mastodon/Production-guide.md
View file

@ -1,6 +1,15 @@
Production guide
================
The following HTTP readers are already set internally and should not be set again:
```
'Server' => 'Mastodon',
'X-Frame-Options' => 'DENY',
'X-Content-Type-Options' => 'nosniff',
'X-XSS-Protection'       => '1; mode=block',
```
## Nginx
Regardless of whether you go with the Docker approach or not, here is an example Nginx server configuration: