UZUCVVZYTCBURTGFJZUQJPQCNKB43PP6LVT7ACTSMSB442GRVNYQC options.services.nginx.goatCounterTemplate = mkConst /* nginx */ ''proxy_set_header Accept-Encoding "";sub_filter "</head>" '<script data-goatcounter="https://analytics.${domain}/count" async src="https://analytics.${domain}/count.js"></script></head>';sub_filter_last_modified on;sub_filter_once on;'';
options.services.nginx.goatCounterTemplate =# nginxmkConst ''proxy_set_header Accept-Encoding "";sub_filter "</head>" '<script data-goatcounter="https://analytics.${domain}/count" async src="https://analytics.${domain}/count.js"></script></head>';sub_filter_last_modified on;sub_filter_once on;'';
options.services.nginx.headers = mkConst /* nginx */ ''proxy_hide_header Access-Control-Allow-Origin;add_header Access-Control-Allow-Origin $allow_origin always;
options.services.nginx.headers =# nginxmkConst ''proxy_hide_header Access-Control-Allow-Origin;add_header Access-Control-Allow-Origin $allow_origin always;
options.services.nginx.headersNoAccessControlOrigin = mkConst /* nginx */ ''proxy_hide_header Access-Control-Allow-Methods;add_header Access-Control-Allow-Methods $allow_methods always;
options.services.nginx.headersNoAccessControlOrigin =# nginxmkConst ''proxy_hide_header Access-Control-Allow-Methods;add_header Access-Control-Allow-Methods $allow_methods always;
proxy_hide_header Content-Security-Policy;add_header Content-Security-Policy "script-src 'self' 'unsafe-inline' 'unsafe-eval' ${domain} *.${domain}; object-src 'self' ${domain} *.${domain}; img-src 'self' data: https:; base-uri 'self'; frame-ancestors 'self';" always;
proxy_hide_header Content-Security-Policy;add_header Content-Security-Policy "script-src 'self' 'unsafe-inline' 'unsafe-eval' ${domain} *.${domain}; object-src 'self' ${domain} *.${domain}; img-src 'self' data: https:; base-uri 'self'; frame-ancestors 'self';" always;
proxy_hide_header Permissions-Policy;add_header Permissions-Policy "camera=(), geolocation=(), payment=(), usb=()" always;'';
proxy_hide_header Permissions-Policy;add_header Permissions-Policy "camera=(), geolocation=(), payment=(), usb=()" always;'';
map $http_origin $allow_origin {~^https://(?:.+\.)?${domain}$ $http_origin;~^https://dr-radka\.pl$ $http_origin;~^https://awesome-technologies\.github\.io$ $http_origin;}
map $http_origin $allow_origin {~^https://(?:.+\.)?${domain}$ $http_origin;~^https://dr-radka\.pl$ $http_origin;~^https://awesome-technologies\.github\.io$ $http_origin;}
map $http_origin $allow_methods {~^https://(?:.+\.)?${domain}$ "CONNECT, DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT, TRACE";~^https://dr-radka\.pl$ "CONNECT, DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT, TRACE";~^https://awesome-technologies\.github\.io$ "CONNECT, DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT, TRACE";}
map $http_origin $allow_methods {~^https://(?:.+\.)?${domain}$ "CONNECT, DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT, TRACE";~^https://dr-radka\.pl$ "CONNECT, DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT, TRACE";~^https://awesome-technologies\.github\.io$ "CONNECT, DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT, TRACE";}
defaults = {environmentFile = config.age.secrets.acmeEnvironment.path;dnsProvider = "cloudflare";dnsResolver = "1.1.1.1";email = "security@${domain}";};
defaults = {environmentFile = config.age.secrets.acmeEnvironment.path;dnsProvider = "cloudflare";dnsResolver = "1.1.1.1";email = "security@${domain}";};