diff --git a/owncloud/nginx.conf b/owncloud/nginx.conf index 9f53b05..c567bf9 100644 --- a/owncloud/nginx.conf +++ b/owncloud/nginx.conf @@ -14,10 +14,6 @@ http { access_log off; error_log /var/log/nginx/error.log error; - add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; preload;"; - add_header X-Frame-Options SAMEORIGIN; - add_header X-Content-Type-Options nosniff; - add_header X-XSS-Protection "1; mode=block"; sendfile on; keepalive_timeout 15; @@ -61,6 +57,11 @@ http { rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect; error_page 403 /core/templates/403.php; error_page 404 /core/templates/404.php; + + add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; preload;"; + add_header X-Frame-Options SAMEORIGIN; + add_header X-Content-Type-Options nosniff; + add_header X-XSS-Protection "1; mode=block"; location = /robots.txt { allow all;