Commit 4697c55b authored by nimrod's avatar nimrod
Browse files

Add security.txt to all domains.

parent 20338d6c

conf.d/global.conf

+1 −0
Original line number Diff line number Diff line
@@ -6,3 +6,4 @@ tcp_nodelay on; 
server_tokens   off;

include         snippets/common-headers.conf;

include         snippets/ads-txt.conf;

include         snippets/security-txt.conf;

snippets/security-txt.conf

0 → 100644
+9 −0
Original line number Diff line number Diff line 
location = /.well-known/security.txt {

    if ($scheme = http) {

        return 301 https://$host$request_uri;

    }

    if ($scheme = https) {

        add_header Content-Type "text/plain; charset=utf-8";

        return 200 "Contact: mailto:security@shore.co.il\nEncryption: https://www.shore.co.il/blog/static/nimrod.asc";

    }

}