Add security.txt to all domains.

conf.d/global.conf

@@ -6,3 +6,4 @@ tcp_nodelay     on;
 server_tokens   off;
 include         snippets/common-headers.conf;
 include         snippets/ads-txt.conf;
+include         snippets/security-txt.conf;

snippets/security-txt.conf

+location = /.well-known/security.txt {
+    if ($scheme = http) {
+        return 301 https://$host$request_uri;
+    }
+    if ($scheme = https) {
+        add_header Content-Type "text/plain; charset=utf-8";
+        return 200 "Contact: mailto:security@shore.co.il\nEncryption: https://www.shore.co.il/blog/static/nimrod.asc";
+    }
+}