From 5f276685940c855b88c52d84ef432a698de453ad Mon Sep 17 00:00:00 2001
From: Wonderfall <wonderfall@schrodinger.io>
Date: Wed, 13 Apr 2016 14:24:03 +0200
Subject: [PATCH] owncloud: update nginx.conf

---
 owncloud/nginx.conf | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/owncloud/nginx.conf b/owncloud/nginx.conf
index f1bbcfb..8f39f1c 100644
--- a/owncloud/nginx.conf
+++ b/owncloud/nginx.conf
@@ -58,11 +58,13 @@ http {
         error_page 403 /core/templates/403.php;
         error_page 404 /core/templates/404.php;
         
-        add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; preload;";
+        add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload;";
         add_header X-Frame-Options SAMEORIGIN;
         add_header X-Content-Type-Options nosniff;
         add_header X-XSS-Protection "1; mode=block";
         add_header X-Robots-Tag none;
+        add_header X-Download-Options noopen;
+        add_header X-Permitted-Cross-Domain-Policies none;
 
         location = /robots.txt {
             allow all;