diff --git a/config/common/services/nginx.nix b/config/common/services/nginx.nix index ece567c..95b1c60 100644 --- a/config/common/services/nginx.nix +++ b/config/common/services/nginx.nix @@ -20,23 +20,23 @@ map $scheme $hsts_header { https "max-age=31536000; includeSubdomains; preload"; } - add_header Strict-Transport-Security $hsts_header; + #add_header Strict-Transport-Security $hsts_header; # Enable CSP for your services. #add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always; # Minimize information leaked to other domains - add_header 'Referrer-Policy' 'same-origin'; + #add_header 'Referrer-Policy' 'same-origin'; # Disable embedding as a frame #add_header X-Frame-Options DENY; # Prevent injection of code in other mime types (XSS Attacks) - add_header X-Content-Type-Options nosniff; + #add_header X-Content-Type-Options nosniff; # Enable XSS protection of the browser. # May be unnecessary when CSP is configured properly (see above) - add_header X-XSS-Protection "1; mode=block"; + #add_header X-XSS-Protection "1; mode=block"; # This might create errors proxy_cookie_path / "/; secure; HttpOnly; SameSite=strict"; diff --git a/config/sources/nix/sources.json b/config/sources/nix/sources.json index 8abde37..9897944 100644 --- a/config/sources/nix/sources.json +++ b/config/sources/nix/sources.json @@ -17,10 +17,10 @@ "homepage": "", "owner": "NixOS", "repo": "nixos-hardware", - "rev": "26ed7a0d4b8741fe1ef1ee6fa64453ca056ce113", - "sha256": "0l2xkflhjyhppiqh4j6gvl3vw9f5pm2656pk73rnikdfy7gg8gbp", + "rev": "9154f4569b6cdfd3c595851a6ba51bfaa472d9f3", + "sha256": "1vmlcda7864ya2byxivnpzkqf41cavj9ms5hjh6i0h8anls56lk6", "type": "tarball", - "url": "https://github.com/NixOS/nixos-hardware/archive/26ed7a0d4b8741fe1ef1ee6fa64453ca056ce113.tar.gz", + "url": "https://github.com/NixOS/nixos-hardware/archive/9154f4569b6cdfd3c595851a6ba51bfaa472d9f3.tar.gz", "url_template": "https://github.com///archive/.tar.gz" }, "nixpkgs": { @@ -29,10 +29,10 @@ "homepage": "", "owner": "NixOS", "repo": "nixpkgs", - "rev": "3385ca0cd7e14c1a1eb80401fe011705ff012323", - "sha256": "11hcc63hbjiq935ldi9sqp5qri5ss3qli2029jxfrqi2796f1vqy", + "rev": "d2b1213bf5ec5e62d96b003ab4b5cbc42abfc0d0", + "sha256": "1z0hb7pxqpn142wxcznd31zm0zflbim0cmfcxvmrrn9zgxdg2bfw", "type": "tarball", - "url": "https://github.com/NixOS/nixpkgs/archive/3385ca0cd7e14c1a1eb80401fe011705ff012323.tar.gz", + "url": "https://github.com/NixOS/nixpkgs/archive/d2b1213bf5ec5e62d96b003ab4b5cbc42abfc0d0.tar.gz", "url_template": "https://github.com///archive/.tar.gz" }, "nixus": {