diff --git a/roles/nginx/templates/https.j2 b/roles/nginx/templates/https.j2 index 749c298..31cb5b2 100644 --- a/roles/nginx/templates/https.j2 +++ b/roles/nginx/templates/https.j2 @@ -52,5 +52,5 @@ # Enable this if you want HSTS (recommended, but be careful) # Include all subdomains and indicate to Google that we want this pre-loaded in Chrome's HSTS store # See: https://hstspreload.appspot.com/ - add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always; + add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always; {% endif %} diff --git a/roles/nginx/templates/vhost.conf.j2 b/roles/nginx/templates/vhost.conf.j2 index 962e036..eec183a 100644 --- a/roles/nginx/templates/vhost.conf.j2 +++ b/roles/nginx/templates/vhost.conf.j2 @@ -71,7 +71,7 @@ server { # Enable this if you want HSTS (recommended, but be careful) # Include all subdomains and indicate to Google that we want this pre-loaded in Chrome's HSTS store # See: https://hstspreload.appspot.com/ - add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always; + add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always; {% endif %} include extra-security.conf;