Skip to content

Instantly share code, notes, and snippets.

<link href="/1.0.0/reset.css" rel="stylesheet">
<link href="/1.0.0/defaults.css" rel="stylesheet">
<link href="/1.0.0/elements.css" rel="stylesheet">
@pingpong-im
pingpong-im / nginx.conf
Last active December 6, 2018 08:10 — forked from plentz/nginx.conf
Best nginx configuration for improved security(and performance). Complete blog post here http://tautt.com/best-nginx-configuration-for-security/
# read more here http://tautt.com/best-nginx-configuration-for-security/
# don't send the nginx version number in error pages and Server header
server_tokens off;
# config to don't allow the browser to render the page inside an frame or iframe
# and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
# if you need to allow [i]frames, you can use SAMEORIGIN or even set an uri with ALLOW-FROM uri
# https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
add_header X-Frame-Options SAMEORIGIN;