73e7ff7b18
This enables the HSTS header by default when an SSL certificate is in use. HSTS options can also be managed via the nginx:set command, which also exposes the ability to disable HSTS for your application.
2 lines
68 B
Plaintext
2 lines
68 B
Plaintext
add_header Strict-Transport-Security "{{ $.HSTS_HEADERS }}" always;
|