feat: Enable HSTS by default

This enables the HSTS header by default when an SSL certificate is in use. HSTS options can also be managed via the nginx:set command, which also exposes the ability to disable HSTS for your application.
2020-02-01 21:16:39 -05:00
parent d42fb02136
commit 73e7ff7b18
8 changed files with 151 additions and 8 deletions
--- a/plugins/nginx-vhosts/templates/hsts.conf.sigil
+++ b/plugins/nginx-vhosts/templates/hsts.conf.sigil
@@ -0,0 +1 @@
+add_header Strict-Transport-Security "{{ $.HSTS_HEADERS }}" always;
				`@@ -0,0 +1 @@`
				`add_header Strict-Transport-Security "{{ $.HSTS_HEADERS }}" always;`