Require HSTS only on configured domains and sub-domains

This commit is contained in:
Wojciech Kozlowski 2017-09-24 20:46:00 +01:00
parent 3224f31567
commit 79cd77c911

View File

@ -44,7 +44,7 @@ http {
ssl_trusted_certificate /etc/letsencrypt/live/wojciechkozlowski.eu/chain.pem;
resolver 208.67.222.222 208.67.220.220;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header Strict-Transport-Security "max-age=31536000" always;
include /etc/nginx/conf.d/*.conf;
}