Some additional nginx security settings

src/freedombone-utils-web

@@ -138,6 +138,11 @@ function nginx_ssl {
     echo "    ssl_protocols $SSL_PROTOCOLS;" >> $filename
     echo "    ssl_ciphers '$SSL_CIPHERS';" >> $filename
     echo "    add_header Content-Security-Policy \"default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline'\";" >> $filename
+    echo '    add_header X-XSS-Protection "1; mode=block";' >> $filename
+    echo '    add_header X-Robots-Tag none;' >> $filename
+    echo '    add_header X-Download-Options noopen;' >> $filename
+    echo '    add_header X-Permitted-Cross-Domain-Policies none;' >> $filename
+
     #nginx_stapling $1
 }