moderation preview of pictures and audio files

nginx/moderation-review.location.conf

@@ -0,0 +1,22 @@
+# In den bestehenden HTTPS-server-Block aufnehmen.
+# Passwortdatei außerhalb des Projekt-/Webverzeichnisses ablegen.
+location ^~ /moderation/api/ {
+    if ($scheme != https) { return 403; }
+    auth_basic "Wegwichtel Moderation";
+    auth_basic_user_file /etc/nginx/wegwichtel-moderation.htpasswd;
+    limit_except GET { deny all; }
+
+    proxy_pass http://127.0.0.1:47145/api/;
+    proxy_http_version 1.1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header Authorization "";
+    proxy_cache off;
+    proxy_hide_header Cache-Control;
+    add_header Cache-Control "no-store" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header Referrer-Policy "no-referrer" always;
+}