revert head changes

mediacms-io · Feb 13, 2025 · 0b9a203 · 0b9a203
1 parent 5cbd815
commit 0b9a203
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 40 deletions.
diff --git a/deploy/docker/nginx_http_only.conf b/deploy/docker/nginx_http_only.conf
@@ -6,26 +6,6 @@ server {
 
     error_log  /var/log/nginx/mediacms.io.error.log  warn;
 
-    # HSTS header
-    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-
-    # CSP header
-    add_header Content-Security-Policy "
-        default-src 'self';
-        script-src 'self';
-        style-src 'self';
-        img-src 'self' data: blob:;
-        media-src 'self' blob:;
-        frame-src 'self';
-        font-src 'self';
-        connect-src 'self';
-        object-src 'none';
-        frame-ancestors 'self';
-        form-action 'self';
-        base-uri 'self';
-        upgrade-insecure-requests;
-    " always;
-
     location /static {
         alias /home/mediacms.io/mediacms/static ;
     }

diff --git a/deploy/local_install/mediacms.io b/deploy/local_install/mediacms.io
@@ -17,26 +17,6 @@ server {
 #        rewrite  ^/(.*)$  https://localhost/$1  permanent;
 #    }
 
-    # HSTS header
-    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-
-    # CSP header
-    add_header Content-Security-Policy "
-        default-src 'self';
-        script-src 'self';
-        style-src 'self';
-        img-src 'self' data: blob:;
-        media-src 'self' blob:;
-        frame-src 'self';
-        font-src 'self';
-        connect-src 'self';
-        object-src 'none';
-        frame-ancestors 'self';
-        form-action 'self';
-        base-uri 'self';
-        upgrade-insecure-requests;
-    " always;
-
     location /static {
         alias /home/mediacms.io/mediacms/static ;
     }