roles/nginx: Use HSTS for https vhosts

Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-10-06 10:46:04 +03:00 · 2014-10-06 10:46:04 +03:00 · ad90f7f0fb
parent 06543b10d5
commit ad90f7f0fb
1 changed files with 1 additions and 1 deletions
--- a/roles/nginx/templates/https.j2
+++ b/roles/nginx/templates/https.j2
@ -13,5 +13,5 @@
    ssl_prefer_server_ciphers on;

    # Enable this if you want HSTS (recommended, but be careful)
-    #add_header Strict-Transport-Security max-age=15768000;
+    add_header Strict-Transport-Security max-age=15768000;