sleepbar/_headers at main · zcpnate/sleepbar · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
# Security Headers for SleepBar Website
/*
  X-Frame-Options: DENY
  X-Content-Type-Options: nosniff
  X-XSS-Protection: 1; mode=block
  Referrer-Policy: strict-origin-when-cross-origin
  Permissions-Policy: geolocation=(), microphone=(), camera=()

# Cache appcast for 5 minutes (allow frequent update checks)
/appcast.xml
  Cache-Control: public, max-age=300

# Cache static assets for 1 week
/media/*
  Cache-Control: public, max-age=604800

/styles.css
  Cache-Control: public, max-age=604800

# Don't cache HTML pages (so users always get latest)
/index.html
  Cache-Control: public, max-age=0, must-revalidate

/privacy.html
  Cache-Control: public, max-age=0, must-revalidate