diff options
Diffstat (limited to 'localfs/etc/httpd/conf.d/security.d/hsts.conf')
| -rw-r--r-- | localfs/etc/httpd/conf.d/security.d/hsts.conf | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/localfs/etc/httpd/conf.d/security.d/hsts.conf b/localfs/etc/httpd/conf.d/security.d/hsts.conf new file mode 100644 index 0000000..3276a70 --- /dev/null +++ b/localfs/etc/httpd/conf.d/security.d/hsts.conf @@ -0,0 +1,4 @@ +# Do not use header always set, it would push HSTS to non-HTTPS even though it's in this tree... +<IfModule mod_ssl.c> + Header set Strict-Transport-Security "max-age=31556926;includeSubDomains;preload" +</IfModule> |