add security settings for nginx

[Diogo-Rego]

No description provided.

[ostefano]

Can you make sure that disabling an option would tentatively revert some of the modifications?

[Diogo-Rego]

Can you make sure that disabling an option would tentatively revert some of the modifications?

The script does three main things:

1. Content-Security-Policy (CSP):

   • First, it removes any existing CSP header.
   • If the variable $CONTENT_SECURITY_POLICY is defined, it adds the CSP header with its value. If the variable is not defined, it skips adding the CSP header.

2. X-Frame-Options:

   • It removes any existing X-Frame-Options header.
   • If the variable $X_FRAME_OPTIONS is not defined, it adds a default header (SAMEORIGIN). If the variable is defined, it uses the value of $X_FRAME_OPTIONS to set the header.

3. HTTP Strict Transport Security (HSTS):

   • It removes any existing HSTS header.
   • If the variable $HSTS_MAX_AGE is defined, it adds the HSTS header with the value of $HSTS_MAX_AGE. If not defined, no HSTS header is added.