fix(security.txt): add configs

freeCodeCamp · Jan 3, 2025 · 39d8170 · 39d8170
1 parent 07118dd
commit 39d8170
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/snippets/common/security.conf b/snippets/common/security.conf
@@ -11,3 +11,12 @@ add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; prelo
 location ~ /\.(?!well-known) {
   deny all;
 }
+
+location = /security.txt {
+  alias "etc/nginx/snippets/files/00-security.txt";
+  expires 15d;
+  add_header Cache-Control "public";
+
+  log_not_found off;
+  access_log off;
+}
diff --git a/snippets/files/00-security.txt b/snippets/files/00-security.txt
@@ -0,0 +1,7 @@
+Contact: https://contribute.freecodecamp.org/security
+Expires: 2022-12-31T18:30:00.000Z
+Encryption: https://flowcrypt.com/me/freecodecamp
+Encryption: https://flowcrypt.com/pub/freecodecamp?show=pubkey
+Acknowledgments: https://contribute.freecodecamp.org/security-hall-of-fame
+Preferred-Languages: en
+Policy: https://contribute.freecodecamp.org/security