summaryrefslogtreecommitdiff
path: root/docs/configuration/hardening.md
diff options
context:
space:
mode:
authorLain Soykaf <lain@lain.com>2024-05-27 16:23:40 +0400
committerLain Soykaf <lain@lain.com>2024-05-27 16:23:40 +0400
commit825b4122a5cda720cb567196ad34e456a68f5dc6 (patch)
tree9b41826b70cf7825db5535cd0383b1aebc48806d /docs/configuration/hardening.md
parent21d9091f5e422493ff69fe59db9c965e0d511369 (diff)
parent6757382abec9ca47a9025b8bed61047414cee20f (diff)
downloadpleroma-825b4122a5cda720cb567196ad34e456a68f5dc6.tar.gz
pleroma-825b4122a5cda720cb567196ad34e456a68f5dc6.zip
Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into pleroma-ipfs_uploader
Diffstat (limited to 'docs/configuration/hardening.md')
-rw-r--r--docs/configuration/hardening.md14
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/configuration/hardening.md b/docs/configuration/hardening.md
index d3bfc4e4a..cc46d1ff9 100644
--- a/docs/configuration/hardening.md
+++ b/docs/configuration/hardening.md
@@ -62,6 +62,20 @@ An additional “Expect-CT” header will be sent with the configured `ct_max_ag
If you click on a link, your browser’s request to the other site will include from where it is coming from. The “Referrer policy” header tells the browser how and if it should send this information. (see [Referrer policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy))
+### Uploaded media and media proxy
+
+It is STRONGLY RECOMMENDED to serve both the locally-uploaded media and the media proxy from another domain than the domain that Pleroma runs on, if applicable.
+
+```elixir
+config :pleroma, :media_proxy,
+ base_url: "https://some.other.domain"
+
+config :pleroma, Pleroma.Upload,
+ base_url: "https://some.other.domain/media"
+```
+
+See `installation/pleroma-mediaproxy.nginx` for examples on how to configure your media proxy.
+
## systemd
A systemd unit example is provided at `installation/pleroma.service`.