Add security headers

[theborakompanioni]

Since nginx is used, security headers can be added, e.g.

add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "DENY" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "no-referrer" always;

(just an example)

Add headers on demand (Strict-Transport-Security, Content-Security-Policy, etc.).

[Abhijay007]

Hi @theborakompanioni I've already created a PR for the cache headers, which is still pending review. In the meantime, would it be okay if I gave this a try as well?

[theborakompanioni]

Hi @theborakompanioni I've already created a PR for the cache headers, which is still pending review. In the meantime, would it be okay if I gave this a try as well?

Yes, of course! I am not to familiar with this so it would be nice if you want to give it a shot!