Hallo, was ist mir den Einstellungen hier:
Additional security settings for nginx (optional)
Add the HSTS header. If you already visited the https version the next time your browser will visit directly the https site and not the http. Prevent man-in-the-middle-attacks.
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
Disable exact server version in header. Prevent scans for vulnerable server.
server_tokens off;
Hallo, was ist mir den
Wed, 10/07/2015 - 11:40amHallo, was ist mir den Einstellungen hier:
Additional security settings for nginx (optional)
Add the HSTS header. If you already visited the https version the next time your browser will visit directly the https site and not the http. Prevent man-in-the-middle-attacks.
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
Disable exact server version in header. Prevent scans for vulnerable server.
server_tokens off;
Die kommen von der offiziellen Seite:
http://manual.seafile.com/deploy/https_with_nginx.html
Sollte man die noch mit rein nehmen?
Danke für Dein How To.
Nils