Merge pull request #485 from chesslablab/issue/476-HSTS

Added HSTS header to responses
chesslablab · Sep 23, 2024 · 5aa4349 · 5aa4349
2 parents 1b0fdb9 + 1a7d222
commit 5aa4349
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/docker/nginx/conf.d/default.conf b/docker/nginx/conf.d/default.conf
@@ -11,6 +11,8 @@ server {
     listen 443 ssl http2;
     server_name             chesslablab.org;
 
+    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+
     ssl_certificate         /etc/nginx/ssl/fullchain.pem;
     ssl_certificate_key     /etc/nginx/ssl/privkey.pem;
     ssl_ciphers             EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;