From aafebaed0004431fe8b619d5c61902fa699dbe55 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Wed, 19 May 2021 09:08:14 -0400
Subject: [PATCH] add /favicon.svg location block

---
 nginx/nginx.conf | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 717a4691..7a5d8a8f 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -238,6 +238,13 @@ http {
             try_files /favicon.svg =404;
         }
 
+        location = /favicon.svg {
+            include snippets/security-headers.conf;
+            # avoid breaking image hotlinking such as https://github.com/TryGhost/Ghost/issues/12880
+            add_header Cross-Origin-Resource-Policy "cross-origin" always;
+            add_header Cache-Control "public, max-age=604800";
+        }
+
         location = /mask-icon.svg {
             include snippets/security-headers.conf;
             add_header Cross-Origin-Resource-Policy "same-origin" always;