jp obrázek, security hlavičky

Author: peldax

css/image.jpg

@@ -17,7 +17,7 @@ html,
 body {
     font-family: 'Roboto', sans-serif;
     height: 100%;
-    background-image: url("image.png");
+    background-image: url("image.jpg");
     background-position: center;
     background-size: cover;
 }

css/style.css

@@ -0,0 +1,2 @@
+Order allow, deny
+Deny from all

server/.htaccess

@@ -0,0 +1,55 @@
+ServerTokens Prod
+ServerSignature Off
+
+<VirtualHost *:80>
+    ServerAdmin webmaster@localhost
+    ServerName infinityloop.cz
+    ServerAlias www.infinityloop.cz
+
+    DocumentRoot /var/www/html/infinityloop
+
+    ErrorLog ${APACHE_LOG_DIR}/error.log
+    CustomLog ${APACHE_LOG_DIR}/access.log combined
+
+    <Directory /var/www/html/infinityloop>
+	Options FollowSymLinks
+        AllowOverride All
+    </Directory>
+
+    RewriteEngine On
+    RewriteCond %{SERVER_NAME} =www.infinityloop.cz [OR]
+    RewriteCond %{SERVER_NAME} =infinityloop.cz
+    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
+</VirtualHost>
+
+<VirtualHost *:443>
+    Protocols h2 http/1.1
+
+    ServerAdmin webmaster@localhost
+    ServerName infinityloop.cz
+    ServerAlias www.infinityloop.cz
+
+    DocumentRoot /var/www/html/infinityloop
+
+    ErrorLog ${APACHE_LOG_DIR}/error.log
+    CustomLog ${APACHE_LOG_DIR}/access.log combined
+
+    <Directory /var/www/html/infinityloop>
+	Options FollowSymLinks
+        AllowOverride All
+    </Directory>
+
+    Include /etc/letsencrypt/options-ssl-apache.conf
+    SSLCertificateFile /etc/letsencrypt/live/infinityloop.cz/fullchain.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/infinityloop.cz/privkey.pem
+
+    Header always set Feature-Policy "accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'"
+    Header always set Content-Security-Policy "default-src 'none'; style-src 'self'; img-src 'self'; script-src 'none'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'"
+    Header always set X-XSS-Protection 1;mode=block
+    Header always set X-Content-Type-Options nosniff
+    Header always set X-Frame-Options SAMEORIGIN
+    Header always set Referrer-Policy "no-referrer"
+    Header always set X-Powered-By "infinityloop.cz"
+    Header always set Strict-Transport-Security "max-age=31536000;" "expr=%{HTTPS} == 'on'"
+    Header always set Expect-CT enforce,max-age=2592000
+</VirtualHost>