From fb8dce45061c524e91deaaa7916c8acbb76a5cde Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Mon, 8 Apr 2024 17:51:25 -0400
Subject: [PATCH] include security headers for vanadium.app root

---
 nginx/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 617d7e2e..4745b3b6 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -192,6 +192,7 @@ http {
         add_header Cross-Origin-Resource-Policy "same-origin" always;
 
         location = / {
+            include snippets/security-headers.conf;
             add_header Cache-Control "public, max-age=2592000";
             return 301 https://grapheneos.org/features#vanadium;
         }