nginx.conf

server {
  listen 8080;
  server_name _;
  root /usr/share/nginx/html;
  index index.html;

  add_header X-Content-Type-Options "nosniff" always;
  add_header Referrer-Policy "no-referrer" always;
  add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
  add_header Content-Security-Policy "default-src 'self'; base-uri 'none'; object-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' data: blob:; connect-src 'self'; frame-ancestors 'self'" always;

  location = /index.html {
    add_header Cache-Control "no-cache";
  }
  location / {
    try_files $uri $uri/ /index.html;
  }
  location ~* \.(js|css|png|jpg|jpeg|webp|svg|json|geojson)$ {
    expires 1h;
    add_header Cache-Control "public, max-age=3600";
    try_files $uri =404;
  }
}