# Included inside each `server { }` for CyberLux onion vhosts.
# Installed to /etc/nginx/cyberlux-server-common.inc by install-tor-onion.sh

server_tokens off;
client_body_timeout 15s;
client_header_timeout 15s;
send_timeout 60s;

add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer" always;
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;