bundles/nginx: add a default security.txt to all vhosts

2021-06-03 18:56:28 +02:00 · 2021-06-03 18:56:28 +02:00 · 1fbc08f74b
commit 1fbc08f74b
parent 0a7e5bcdcd
5 changed files with 51 additions and 1 deletions
--- a/bundles/nginx/files/security.txt
+++ b/bundles/nginx/files/security.txt
@ -0,0 +1,9 @@
+Contact: ${vhost.get('contact', repo.libs.defaults.security_email)}
+Expires: ${vhost.get('expires', expiry)}
+Preferred-Languages: ${','.join(sorted(vhost.get('lang', repo.libs.defaults.security_lang)))}
+Canonical: ${proto}://${domain}/.well-known/security.txt
+% for key, value in sorted(vhost.items()):
+%  if key[0].isupper():
+${key}: ${value}
+%  endif
+% endfor