use prefix match for fonts instead of regex

GrapheneOS · May 18, 2021 · 2c54504 · 2c54504
1 parent fc67d48
commit 2c54504
Showing 1 changed file with 9 additions and 8 deletions.
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
@@ -231,6 +231,15 @@ http {
             }
         }
 
+        location ^~ /fonts/ {
+            include snippets/security-headers.conf;
+            add_header Cross-Origin-Resource-Policy "same-origin" always;
+            add_header Cache-Control "public, max-age=31536000, immutable";
+            gzip_static off;
+            brotli_static off;
+        }
+
+
         location ~ "\.webmanifest$" {
             include snippets/security-headers.conf;
             add_header Cross-Origin-Resource-Policy "same-origin" always;
@@ -250,14 +259,6 @@ http {
             add_header Cache-Control "public, max-age=31536000";
         }
 
-        location ~ "\.woff2$" {
-            include snippets/security-headers.conf;
-            add_header Cross-Origin-Resource-Policy "same-origin" always;
-            add_header Cache-Control "public, max-age=31536000, immutable";
-            gzip_static off;
-            brotli_static off;
-        }
-
         location ~ "\.png$" {
             include snippets/security-headers.conf;
             # avoid breaking image hotlinking such as https://github.com/TryGhost/Ghost/issues/12880