From 30e8d9d31c265d790c07ca7f14faf5140784cebf Mon Sep 17 00:00:00 2001
From: Wojciech Kozlowski <wk@wojciechkozlowski.eu>
Date: Thu, 14 Nov 2019 23:01:14 +0800
Subject: [PATCH] Set X-Frame-Options for nextcloud

---
 nextcloud/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nextcloud/nginx.conf b/nextcloud/nginx.conf
index 1a44a65..f2869c8 100644
--- a/nextcloud/nginx.conf
+++ b/nextcloud/nginx.conf
@@ -44,6 +44,7 @@ http {
         add_header X-Robots-Tag none;
         add_header X-Download-Options noopen;
         add_header X-Permitted-Cross-Domain-Policies none;
+        add_header X-Frame-Options "SAMEORIGIN";
         add_header Referrer-Policy no-referrer;
 
         root /var/www/html;