summaryrefslogtreecommitdiffstats
path: root/files/etc/nginx/sites-available/webmap
diff options
context:
space:
mode:
Diffstat (limited to 'files/etc/nginx/sites-available/webmap')
-rw-r--r--files/etc/nginx/sites-available/webmap23
1 files changed, 15 insertions, 8 deletions
diff --git a/files/etc/nginx/sites-available/webmap b/files/etc/nginx/sites-available/webmap
index d5e005a..e43af57 100644
--- a/files/etc/nginx/sites-available/webmap
+++ b/files/etc/nginx/sites-available/webmap
@@ -65,8 +65,10 @@ server {
location ^~ /assets/ {
expires 7d;
- brotli_static on;
try_files $uri =404;
+ location ~ "\.(?:css|js|svg)$" {
+ brotli_static on;
+ }
}
location ^~ /tiles/ {
expires 30m;
@@ -75,6 +77,15 @@ server {
# service an empty payload to save bandwidth
error_page 404 /_.txt;
}
+ location ^~ /raster/ {
+ expires 30m;
+ try_files $uri =404;
+ # service an empty payload to save bandwidth
+ error_page 404 /_.txt;
+ location ~ "\.json$" {
+ brotli_static on;
+ }
+ }
location = /q {
expires epoch;
limit_except POST { deny all; }
@@ -90,14 +101,8 @@ server {
gzip on;
gzip_types application/json text/plain;
include uwsgi_params;
- uwsgi_buffering off;
uwsgi_pass unix:/run/webmap-cgi.socket;
}
- location = /tiles/metadata.json {
- expires epoch;
- brotli_static on;
- try_files $uri =404;
- }
location = /_.txt {
# cache 404 responses for 30m like for valid tiles
@@ -113,8 +118,10 @@ server {
add_header X-Content-Type-Options "nosniff";
add_header X-XSS-Protection "1; mode=block";
add_header Strict-Transport-Security "max-age=31557600; includeSubDomains" always;
- add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self' data: https://minkarta.lantmateriet.se/map/; script-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'none'; base-uri 'self'";
+ add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self' data: https://minkarta.lantmateriet.se/map/; script-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'none'; worker-src blob:; base-uri 'self'";
+ expires 1h;
+ brotli_static on;
try_files $uri $uri/ =404;
}
}