How to Add HTTP Security Headers with OpenLiteSpeed and DirectAdmin

[Lelantis]

Hello,

I am sharing this link because it really was a pain to find a solution for the headers for OpenLitespeed and DirectAdmin.

How to Add HTTP Security Headers in OLS & DirectAdmin

In this guide, we will show you how to add HTTP Security Headers to your domains with OpenLiteSpeed and DirectAdmin using the virtualhost configuration file.

www.vpsbasics.com

I hope it helps some people out there I also understood better and the custom templates in DirectAdmin.

 

[alinajafi]

Sir 1st let me to thanks you and then let me to thanks the own of the https://www.vpsbasics.com

 

[johannes]

Let me add 2 CSP generators, as we found out that standard security headers can also block a lot of desired functions (in wordpress on our side), as Pagebuilders, embedded video contents, fonts, and much more.

CSP Content Security Policy Generator – Get this Extension for 🦊 Firefox (en-US)

Download CSP Content Security Policy Generator for Firefox. Best Content-Security-Policy generator to automatically create Strict CSP policies (with SHA support) for any website.

addons.mozilla.org

https://csper.io/hasher


With both of those generators, you have to visit your website (and all sites which can be problematic) and they will give you the right CSPs.