Caddy basic securityheader.com policy

readme.txt

# SEELE's Security Headers policy

## Howtu use

1. copy seele's policy to the top of your `Caddyfile`
2.

example.com {
  import seele
}

3. done ;)
4. https://securityheaders.com and flex

Caddyfile

(seele) {
        encode gzip
        header Strict-Transport-Security "max-age=31536000; includeSubDomains"
        header X-Frame-Options "SAMEORIGIN"
        header X-Content-Type-Options "nosniff"
        header Content-Security-Policy "default-src https: 'unsafe-inline' 'unsafe-eval';media-src blob: https:;worker-src blob: https:"
        header Permissions-Policy "geolocation=(self), microphone=()"
        header Referrer-Policy "no-referrer"
}