diff --git a/roles/nginx/templates/https.j2 b/roles/nginx/templates/https.j2 index 21739ab..705fac7 100644 --- a/roles/nginx/templates/https.j2 +++ b/roles/nginx/templates/https.j2 @@ -32,5 +32,6 @@ spdy_headers_comp 6; # Enable this if you want HSTS (recommended, but be careful) - add_header Strict-Transport-Security max-age=15768000 always; - + # Include all subdomains and indicate to Google that we want this pre-loaded in Chrome's HSTS store + # See: https://hstspreload.appspot.com/ + add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;