Skip to content

HSTS and SSL settings #1351

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from
Closed

Conversation

jameskimmel
Copy link
Contributor

No description provided.

@jellyfin-bot
Copy link

Cloudflare Pages deployment

Latest commit 02cc9661afc4a41add64821d4f88411c1d9c1ee4
Status ✅ Deployed!
Preview URL https://652100c7.jellyfin-org.pages.dev
Type 🔀 Preview

Copy link
Member

@nielsvanvelzen nielsvanvelzen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We're using a minimal configuration in our documentation that highlights options needed for Jellyfin. Additional security on-top of the default security practices from a webserver is out of scope for our docs.

@jameskimmel
Copy link
Contributor Author

jameskimmel commented Apr 3, 2025

We're using a minimal configuration in our documentation that highlights options needed for Jellyfin. Additional security on-top of the default security practices from a webserver is out of scope for our docs.

I would argue that HSTS and ssl stapling are default security practices nowadays.
IMHO more important than the Permissions policy we also have in the NGINX docs.

But I am also fine with commenting it out instead.

@jameskimmel jameskimmel closed this by deleting the head repository Apr 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants