timothykim b7439b23e3 fix nginx security headers not being applied to https responses ...

nginx add_header inheritance meant X-Content-Type-Options and X-Frame-Options
were silently dropped from all https server blocks. moved all security headers
into a shared snippet (security-headers.inc) included per server block. added
pytest-based header verification that auto-discovers sites from conf files.

2026-03-20 15:11:56 -04:00

..

conf.d

fix nginx security headers not being applied to https responses

2026-03-20 15:11:56 -04:00

compose.yml

replace NPM with vanilla nginx + certbot

2026-03-16 00:55:13 -04:00

nginx.conf

fix nginx security headers not being applied to https responses

2026-03-20 15:11:56 -04:00