Skip to content

Commit f5ee736

Browse files
committed
avoid regex location for webmanifest
1 parent fa6725b commit f5ee736

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

nginx/nginx.conf

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -367,6 +367,12 @@ http {
367367
default_type application/trafficadvice+json;
368368
}
369369

370+
location = /manifest.webmanifest {
371+
include snippets/security-headers.conf;
372+
add_header Cross-Origin-Resource-Policy "same-origin" always;
373+
add_header Cache-Control "public, max-age=604800";
374+
}
375+
370376
location = /install/web {
371377
include snippets/security-headers-base.conf;
372378
add_header Content-Security-Policy "default-src 'none'; child-src 'self'; connect-src 'self' https://releases.grapheneos.org/; font-src 'self'; img-src 'self'; manifest-src 'self'; script-src 'self'; style-src 'self'; webrtc 'block'; form-action 'none'; frame-ancestors 'none'; base-uri 'none'" always;
@@ -408,12 +414,6 @@ http {
408414
add_header Cache-Control "public, max-age=31536000, immutable";
409415
}
410416

411-
location ~ "\.webmanifest$" {
412-
include snippets/security-headers.conf;
413-
add_header Cross-Origin-Resource-Policy "same-origin" always;
414-
add_header Cache-Control "public, max-age=604800";
415-
}
416-
417417
location ~ "\.svg$" {
418418
include snippets/security-headers.conf;
419419
add_header Cross-Origin-Resource-Policy "same-origin" always;

0 commit comments

Comments
 (0)