From 36ac10c6dd963654ce983a6fddc88e473d57ccd5 Mon Sep 17 00:00:00 2001
From: Toast <toast003@tutamail.com>
Date: Fri, 10 Jan 2025 20:02:29 +0100
Subject: [PATCH] Server/grafana: change security settings

---
 roles/server/grafana.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/server/grafana.nix b/roles/server/grafana.nix
index 99eb5d9..957c41b 100644
--- a/roles/server/grafana.nix
+++ b/roles/server/grafana.nix
@@ -36,6 +36,9 @@ in {
         security = {
           admin_user = "$__file{${config.age.secrets.grafanaAdminName.path}}";
           admin_password = "$__file{${config.age.secrets.grafanaAdminPassword.path}}";
+          cookie_secure = true;
+          strict_transport_security = true;
+          content_security_policy = true;
         };
         server = {
           protocol = "socket";