summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authortusooa <tusooa@kazv.moe>2023-05-26 17:17:13 -0400
committertusooa <tusooa@kazv.moe>2023-05-26 17:17:13 -0400
commitf970091c6a58d06a42594e2c4a0baa5a86617652 (patch)
tree0fc16b1409a75ade46bfda6e2b5802bb385949f1 /docs
parentcd9d6a12abb745f6a060434c13ca6d85f43a4e02 (diff)
Add instructions to serve media on another domain
Diffstat (limited to 'docs')
-rw-r--r--docs/configuration/hardening.md14
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/configuration/hardening.md b/docs/configuration/hardening.md
index d3bfc4e4a..4f40873e6 100644
--- a/docs/configuration/hardening.md
+++ b/docs/configuration/hardening.md
@@ -62,6 +62,20 @@ An additional “Expect-CT” header will be sent with the configured `ct_max_ag
If you click on a link, your browser’s request to the other site will include from where it is coming from. The “Referrer policy” header tells the browser how and if it should send this information. (see [Referrer policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy))
+### Uploaded media and media proxy
+
+It is STRONGLY RECOMMENDED to serve both the locally-uploaded media and the media proxy from another domain than the domain that Pleroma runs on, if applicable.
+
+```elixir
+config :pleroma, :media_proxy,
+ base_url: "https://some.other.domain"
+
+config :pleroma, Pleroma.Upload,
+ base_url: "https://some.other.domain"
+```
+
+See `installation/pleroma-mediaproxy.nginx` for examples on how to configure your media proxy.
+
## systemd
A systemd unit example is provided at `installation/pleroma.service`.