varnish config 7

by trisna dev

JavaScript

sub vcl_deliver {
    # Add security headers
    set resp.http.X-Content-Type-Options = "nosniff";
    set resp.http.X-Frame-Options = "SAMEORIGIN";
    set resp.http.Content-Security-Policy = "default-src 'self'; script-src 'self'; style-src 'self';";
}