yurake/k8s-3tier-webapp

server {

    listen       8080;
    server_name  localhost;

    root /etc/nginx/docs;

    #charset koi8-r;
    #access_log  /var/log/nginx/host.access.log  main;

    index  /index.html;
    error_page  404              /404.html;
    error_page  500 502 503 504  /50x.html;

    location ~ .*\.(html?|jpe?g|gif|png|css|js|ico|swf|inc) {
        expires 1d;
    }

    location /favicon {
        empty_gif;
        access_log    off;
        log_not_found off;
    }

    location /stub_status {
        stub_status on;
    }

    add_header X-Frame-Options SAMEORIGIN;
    add_header X-XSS-Protection "1; mode=block";
    add_header X-Content-Type-Options nosniff;
    add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-eval' ajax.googleapis.com; connect-src 'self'; img-src 'self'; style-src 'self';base-uri 'self';form-action 'self'";
    client_max_body_size 1k;
    client_header_buffer_size 1k;
    large_client_header_buffers 4 8k;

}