reorganize ssl config ; default proxy config

snippets/default_proxy.conf

@@ -1,5 +1,5 @@
 location / {
     include proxy.conf;
     proxy_buffering off;
-    proxy_pass http://$host:$port;
+    proxy_pass http://$proxy_host:$proxy_port;
 }

snippets/private.conf

@@ -1 +0,0 @@
-include ldap.conf;

snippets/proxy.conf

@@ -7,7 +7,7 @@
         proxy_set_header X-Forwarde-Proto $scheme;
         proxy_set_header X_FORWARDED_SSL on;
         proxy_set_header HTTP_X_FORWARDED_SSL on;
-        proxy_buffering off;
+        
         
         add_header Content-Security-Policy "default-src 'self' 'unsafe-inline'";
         add_header X-Content-Type-Options nosniff;

snippets/secure.conf

@@ -1 +1,6 @@
-include add_auto_ssl.conf;
+include ssl.conf;
+        add_header Content-Security-Policy "default-src 'self' 'unsafe-inline'";
+        add_header X-Content-Type-Options nosniff;
+        add_header X-XSS-Protection "1; mode=block";
+        add_header Referrer-Policy "strict-origin";
+        add_header Strict-Transport-Security "max-age=31536000" always;