Merge pull request #25 from Star-Academy/fixcicd

fix: fix nginx config

nginx.conf

@@ -31,26 +31,25 @@ http {
     error_log              /dev/null;
 
     # Load configs
-    # security headers
-    add_header X-XSS-Protection        "1; mode=block" always;
-    add_header X-Content-Type-Options  "nosniff" always;
-    add_header Referrer-Policy         "no-referrer-when-downgrade" always;
-    add_header Content-Security-Policy "default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';" always;
-    add_header Permissions-Policy      "interest-cohort=()" always;
-
-    # . files
-    location ~ /\.(?!well-known) {
-        deny all;
-    }
+
     server {
         listen      80;
         listen      [::]:80;
         server_name example.com;
         root        /usr/share/nginx/html;
         index index.csr.html;
 
-        # security
-        include     nginxconfig.io/security.conf;
+        # security headers
+        add_header X-XSS-Protection        "1; mode=block" always;
+        add_header X-Content-Type-Options  "nosniff" always;
+        add_header Referrer-Policy         "no-referrer-when-downgrade" always;
+        add_header Content-Security-Policy "default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';" always;
+        add_header Permissions-Policy      "interest-cohort=()" always;
+
+        # . files
+        location ~ /\.(?!well-known) {
+            deny all;
+        }
 
         # logging
         access_log  /var/log/nginx/access.log combined buffer=512k flush=1m;