1 files changed, 22 insertions, 0 deletions

diff --git a/echo/middleware/strict_secure.go b/echo/middleware/strict_secure.go
new file mode 100644
index 0000000..0b61b92
--- /dev/null
+++ b/echo/middleware/strict_secure.go
@@ -0,0 +1,22 @@
+package middleware
+
+import (
+        gltime "code.crute.us/mcrute/golib/time"
+
+        "github.com/labstack/echo/v4"
+        "github.com/labstack/echo/v4/middleware"
+)
+
+// StrictSecure returns a Secure middleware with strict settings which match
+// the legacy nginx proxy defaults.
+func StrictSecure() echo.MiddlewareFunc {
+        return middleware.SecureWithConfig(middleware.SecureConfig{
+                XFrameOptions:         "SAMEORIGIN",
+                ContentTypeNosniff:    "nosniff",
+                XSSProtection:         "1; mode=block",
+                ReferrerPolicy:        "same-origin",
+                HSTSExcludeSubdomains: false,
+                HSTSPreloadEnabled:    true,
+                HSTSMaxAge:            gltime.ToSeconds(2 * gltime.Year),
+        })
+}