viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

disallow my sites from being iframed [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2026-01-18 13:41:20 +00:00
parent aa2acad165
commit cc419c68b7
No known key found for this signature in database
GPG key ID: 4056458DBDBF8863
2 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/kubernetes/ingress_factory/main.tf
View file

@ -119,6 +119,8 @@ resource "kubernetes_ingress_v1" "proxied-ingress" {
"nginx.ingress.kubernetes.io/configuration-snippet" = <<-EOF "nginx.ingress.kubernetes.io/configuration-snippet" = <<-EOF
limit_req_status 429; limit_req_status 429;
limit_conn_status 429; limit_conn_status 429;
# Prevent iframe embedding (clickjacking protection) - allow subdomains only
add_header Content-Security-Policy "frame-ancestors 'self' *.viktorbarzin.me viktorbarzin.me" always;
${var.rybbit_site_id != null ? <<-JS ${var.rybbit_site_id != null ? <<-JS
# Rybbit Analytics # Rybbit Analytics
# Only modify HTML # Only modify HTML

BIN
terraform.tfstate
View file

Binary file not shown.