summaryrefslogtreecommitdiff
path: root/docs/configuration/hardening.md
diff options
context:
space:
mode:
authortusooa <tusooa@kazv.moe>2023-11-01 00:43:35 +0000
committertusooa <tusooa@kazv.moe>2023-11-01 00:43:35 +0000
commit6f654d534a1a606185c4f3543e7b1552f0a20566 (patch)
treeec8b787417a236aca411f0697465caf51d2b61ed /docs/configuration/hardening.md
parentf966abe4fbacf8fa91cf2b533f8abfb57d62f8b7 (diff)
parentad45b06b3f1d7dd4157a3fbc44dc1d2f07c98f35 (diff)
downloadpleroma-6f654d534a1a606185c4f3543e7b1552f0a20566.tar.gz
pleroma-6f654d534a1a606185c4f3543e7b1552f0a20566.zip
Merge branch 'release/2.6.0' into 'stable'
Release/2.6.0 See merge request pleroma/pleroma!3924
Diffstat (limited to 'docs/configuration/hardening.md')
-rw-r--r--docs/configuration/hardening.md14
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/configuration/hardening.md b/docs/configuration/hardening.md
index d3bfc4e4a..cc46d1ff9 100644
--- a/docs/configuration/hardening.md
+++ b/docs/configuration/hardening.md
@@ -62,6 +62,20 @@ An additional “Expect-CT” header will be sent with the configured `ct_max_ag
If you click on a link, your browser’s request to the other site will include from where it is coming from. The “Referrer policy” header tells the browser how and if it should send this information. (see [Referrer policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy))
+### Uploaded media and media proxy
+
+It is STRONGLY RECOMMENDED to serve both the locally-uploaded media and the media proxy from another domain than the domain that Pleroma runs on, if applicable.
+
+```elixir
+config :pleroma, :media_proxy,
+ base_url: "https://some.other.domain"
+
+config :pleroma, Pleroma.Upload,
+ base_url: "https://some.other.domain/media"
+```
+
+See `installation/pleroma-mediaproxy.nginx` for examples on how to configure your media proxy.
+
## systemd
A systemd unit example is provided at `installation/pleroma.service`.