Commit 0fdfc815 authored by Luc Didry's avatar Luc Didry

[nginx] Enable HSTS header

parent 5623eaed
Pipeline #132866 passed with stages
in 44 seconds
......@@ -48,7 +48,7 @@ server {
# # Tells browsers to stick with HTTPS and never visit the insecure HTTP
# # version. Once a browser sees this header, it will only visit the site over
# # HTTPS for the next 2 years: (read more on hstspreload.org)
# #add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
# add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
#
# access_log /var/log/nginx/{{settings.hostname}}.access.log;
# error_log /var/log/nginx/{{settings.hostname}}.error.log;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment