edit nginx

Author: Sergey

.nginx/nginx.conf

@@ -9,6 +9,8 @@ server {
     add_header X-Frame-Options "SAMEORIGIN" always;
     add_header X-Content-Type-Options "nosniff" always;
     add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+
+    add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
 
     add_header Cross-Origin-Opener-Policy "same-origin" always;
     add_header Cross-Origin-Embedder-Policy "require-corp" always;
@@ -20,23 +22,23 @@ server {
 
     location / {
         try_files $uri $uri/ /index.html;
-        
-        location ~* \.html$ {
-            expires -1;
-            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
-            add_header Content-Security-Policy "
-                default-src 'self';
-                script-src 'self';
-                style-src 'self' https://fonts.googleapis.com;
-                font-src 'self' https://fonts.gstatic.com;
-                img-src 'self' data: https:;
-                connect-src 'self' https:;
-                frame-ancestors 'none';
-                base-uri 'self';
-                form-action 'self';
-                upgrade-insecure-requests;
-            " always;
-        }
+    }
+
+    location ~* \.html$ {
+        expires -1;
+        add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
+        add_header Content-Security-Policy "
+            default-src 'self';
+            script-src 'self';
+            style-src 'self' https://fonts.googleapis.com;
+            font-src 'self' https://fonts.gstatic.com;
+            img-src 'self' data: https:;
+            connect-src 'self' https:;
+            frame-ancestors 'none';
+            base-uri 'self';
+            form-action 'self';
+            upgrade-insecure-requests;
+        " always;
     }
 
     location /static {