From 9f3c26690cc2c9b91270d854fe452ab5d1d46b3a Mon Sep 17 00:00:00 2001
From: Wonderfall <wonderfall@schrodinger.io>
Date: Wed, 13 Apr 2016 13:51:16 +0200
Subject: [PATCH] owncloud: add some headers

Now there's no need to put these in your vhost. You'll get rid of warning messages.
---
 owncloud/nginx.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/owncloud/nginx.conf b/owncloud/nginx.conf
index 0e91932..369d175 100644
--- a/owncloud/nginx.conf
+++ b/owncloud/nginx.conf
@@ -14,6 +14,10 @@ http {
 
     access_log off;
     error_log /var/log/nginx/error.log error;
+    add_header Strict-Transport-Security "max-age=15552000; includeSubdomains; prel$
+    add_header X-Frame-Options SAMEORIGIN;
+    add_header X-Content-Type-Options nosniff;
+    add_header X-XSS-Protection "1; mode=block";
 
     sendfile on;
     keepalive_timeout 15;