[ENHANCEMENTS] Add Security Headers // Presets // Checkboxes about zoraxy

[Morethanevil]

@Nazgile94

If you want a multiline code block than use ` three times before the codeblock and three times at the end of the codeblock

Security headers would be cool build like a submenu 🤔

An On/Off switch for all headers or switches for every single one if you don't need all at once or want to troubleshoot

[Nazgile94]

Jellyfin runs in docker but with hostmode for me, Zoraxy (running directly on host) points to localhost:ip

I don't use additional headers for Jellyfin, but I don't use a LG TV too. Has it Android TV? The Jellyfin Android TV should work out of the box.

But adding additional headers is not a bad idea. It is possible right now, but a switch for the most common headers would make it easier.

nope, the webOS jellyfin app is strange and kind of old.
its a bug

the default x-frame option header.

my jellyfin is public avaliable for friends, so i have always a little "security" in mind, better more than less :D

im running jellyfin on unraid and npm on proxmox in LXC container - pointing to unraid IP + jellyfin exposed port.

[tobychui]

Feature added in v3.0.7. You can now go to Custom Headers and create your own HSTS & (limited version of) Permission-Policy with a web form.

[Nazgile94]

@Nazgile94

If you want a multiline code block than use ` three times before the codeblock and three times at the end of the codeblock

Security headers would be cool build like a submenu 🤔

An On/Off switch for all headers or switches for every single one if you don't need all at once or want to troubleshoot

worked! thanks :D

toggles like on of switch would be nice
but a custom option to insert own or maybe missing headers is nessesary i think, bcs i dont think ALL possible headers can be implemented :D but the basic stuff would be nice like u said - for troubleshooting just turn off one by another to troubleshoot stuff.

tooks my hours to figure out, why i cant access my jellyfon on LG tv bcs not supported header on webOS tvs...

NPM is a DIVA with setting up headers, bcs bug: NginxProxyManager/nginx-proxy-manager#3478 (comment)

sry for typos etc-not my native language. just school english and diablo 2 long time ago.^^

[Morethanevil]

Jellyfin runs in docker but with hostmode for me, Zoraxy (running directly on host) points to localhost:ip

I don't use additional headers for Jellyfin, but I don't use a LG TV too. Has it Android TV? The Jellyfin Android TV should work out of the box.

But adding additional headers is not a bad idea. It is possible right now, but a switch for the most common headers would make it easier.