Pin image digests and disable TRACE method in nginx

- nginx and mysql images pinned to SHA256 digests - nginx: return 405 on TRACE requests Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-25 01:20:18 -07:00
parent e08e031ad0
commit 84b07e33e7
2 changed files with 6 additions and 2 deletions
@@ -17,6 +17,10 @@ server {
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self';" always;

+    if ($request_method = TRACE) {
+        return 405;
+    }
+
    location / {
        try_files $uri $uri/ /index.html;
    }