From ad90f7f0fbd33a5dbf70dee614f1464d3594b5f1 Mon Sep 17 00:00:00 2001 From: Alan Orth Date: Mon, 6 Oct 2014 10:46:04 +0300 Subject: [PATCH] roles/nginx: Use HSTS for https vhosts Signed-off-by: Alan Orth --- roles/nginx/templates/https.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/nginx/templates/https.j2 b/roles/nginx/templates/https.j2 index 65ede01..6f68463 100644 --- a/roles/nginx/templates/https.j2 +++ b/roles/nginx/templates/https.j2 @@ -13,5 +13,5 @@ ssl_prefer_server_ciphers on; # Enable this if you want HSTS (recommended, but be careful) - #add_header Strict-Transport-Security max-age=15768000; + add_header Strict-Transport-Security max-age=15768000;