Security Headers for NGINX Proxy Manager
Issue: https://github.com/jc21/nginx-proxy-manager/issues/582
Due to a bug it's impossible to add securityheaders to NGINX Proxy Manager. Use this workaround to fix this issue:
- download _hsts.conf
wget https://git.hibbit.net/rogier/_hsts.conf/raw/commit/67ed7f3bcdec6e3547923c899aafc693532750f0/_hsts.conf -P /apps/proxy
- Create a volume to this file (read-only)
Docker Compose
volumes:
- /apps/proxy/_hsts.conf:/app/templates/_hsts.conf:ro
-
Go to NGINX Proxy Manager, click Edit and go to the tab SSL. Enable and/or re-enable Force SSL, HSTS Enabled and HSTS Subdomains.
Done!
Note: If you have enabled an Access List not all headers will load. This is not a bug!
Result @ https://securityheaders.com:
