Content Comparison

server {
  listen      443 ssl http2;
  server_name biblioteka-miejska.sowa.pl;
  root        /dev/null;

  ssl_certificate     /etc/letsencrypt/live/biblioteka-miejska.sowa.pl/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/biblioteka-miejska.sowa.pl/privkey.pem;  
  
  keepalive_timeout 10m;

 access_log /var/log/nginx/biblioteka-miejska.sowa.pl-access.log;

  location / {
    client_max_body_size 8m;

    proxy_pass         http://opac;
    proxy_set_header   Host $host;
    proxy_set_header   X-Real-IP $remote_addr;
    proxy_set_header   X-Forwarded-Port 443;
    proxy_set_header   X-Forwarded-Proto $scheme;
    proxy_set_header   X-Forwarded-Proto $scheme Connection "";
    proxy_http_version 1.1;
    proxy_request_buffering off;

    add_header Content-Security-Policy "default-src 'self' data: 'unsafe-inline'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com www.googletagmanager.com; connect-src 'self' www.googletagmanager.com; frame-src 'self' www.google.com; img-src *;";
    proxy_setadd_header Strict-Transport-Security  Connection ""max-age=31536000; includeSubDomains; preload";
    proxyadd_http_version 1.1;
    proxy_request_buffering offheader X-Content-Type-Options nosniff;
  }  
}

server {
  listen      443 ssl http2;
  server_name web.biblioteka-miejska.sowa.pl;

  ssl_certificate     /etc/letsencrypt/live/biblioteka-miejska.sowa.pl/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/biblioteka-miejska.sowa.pl/privkey.pem;  

  include "/home/sowa/websowawebsowa2/nginx.conf";
}