Add securityheades to websites

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2017-10-16 21:47:06 +00:00
parent 44a5ceb686
commit 9245388053
2 changed files with 5 additions and 0 deletions

View file

@ -46,6 +46,7 @@
with_items:
- logs
- robots
- securityheaders
notify:
- reload proxyhttpd
tags:

View file

@ -0,0 +1,4 @@
Header always set X-Frame-Options "DENY"
Header always set X-Xss-Protection "1; mode=block"
Header always set X-Content-Type-Options "nosniff"
Header always set Referrer-Policy "same-origin"