Change HSTS maximum age to 4 years. Include subdomains in HSTS header.
This commit is contained in:
parent
b6f78d3605
commit
a2a911aaf9
@ -4,7 +4,7 @@
|
||||
# Copyright 2022-2023 Jake Winters
|
||||
# SPDX-License-Identifier: BSD-3-Clause-Clear
|
||||
|
||||
# Version: 5.0.0.4
|
||||
# Version: 6.0.0.5
|
||||
|
||||
|
||||
# Server (unencrypted)
|
||||
@ -52,7 +52,7 @@ server {
|
||||
ssl_session_cache shared:MozSSL:10m;
|
||||
ssl_session_cache shared:ssl_session_cache:10m;
|
||||
ssl_session_tickets off;
|
||||
add_header Strict-Transport-Security "max-age=157680000; preload";
|
||||
add_header Strict-Transport-Security "max-age=126200000; includeSubDomains; preload";
|
||||
add_header X-Frame-Options "DENY";
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
# add_header Content-Security-Policy "default-src 'self'";
|
||||
|
Loading…
x
Reference in New Issue
Block a user