Merge pull request #370 from jfredrickson/update-x-robots-tag

Match X-Robots-Tag recommendation in Nextcloud docs
nextcloud · Apr 6, 2023 · 400e791 · 400e791
2 parents 23a180f + 9f10d65
commit 400e791
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/charts/nextcloud/Chart.yaml b/charts/nextcloud/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: nextcloud
-version: 3.5.4
+version: 3.5.5
 appVersion: 26.0.0
 description: A file sharing server that puts the control and security of your own data back into your hands.
 keywords:

diff --git a/charts/nextcloud/templates/nginx-config.yaml b/charts/nextcloud/templates/nginx-config.yaml
@@ -71,13 +71,13 @@ data:
             #pagespeed off;
 
             # HTTP response headers borrowed from Nextcloud `.htaccess`
-            add_header Referrer-Policy                      "no-referrer"   always;
-            add_header X-Content-Type-Options               "nosniff"       always;
-            add_header X-Download-Options                   "noopen"        always;
-            add_header X-Frame-Options                      "SAMEORIGIN"    always;
-            add_header X-Permitted-Cross-Domain-Policies    "none"          always;
-            add_header X-Robots-Tag                         "none"          always;
-            add_header X-XSS-Protection                     "1; mode=block" always;
+            add_header Referrer-Policy                      "no-referrer"       always;
+            add_header X-Content-Type-Options               "nosniff"           always;
+            add_header X-Download-Options                   "noopen"            always;
+            add_header X-Frame-Options                      "SAMEORIGIN"        always;
+            add_header X-Permitted-Cross-Domain-Policies    "none"              always;
+            add_header X-Robots-Tag                         "noindex, nofollow" always;
+            add_header X-XSS-Protection                     "1; mode=block"     always;
 
             # Remove X-Powered-By, which is an information leak
             fastcgi_hide_header X-Powered-By;