From 6a639a2acf68bf10052eab181cea423b37a087f2 Mon Sep 17 00:00:00 2001 From: azalus88 Date: Sun, 29 Nov 2020 09:35:45 -0500 Subject: [PATCH] Add Nextcloud HSTS header --- nextcloud.subdomain.conf.sample | 1 + nextcloud.subfolder.conf.sample | 1 + 2 files changed, 2 insertions(+) diff --git a/nextcloud.subdomain.conf.sample b/nextcloud.subdomain.conf.sample index 16c7285..0b21776 100644 --- a/nextcloud.subdomain.conf.sample +++ b/nextcloud.subdomain.conf.sample @@ -31,5 +31,6 @@ server { proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_max_temp_file_size 2048m; + add_header Strict-Transport-Security "max-age=15552000; includeSubDomains; preload;"; } } diff --git a/nextcloud.subfolder.conf.sample b/nextcloud.subfolder.conf.sample index ab75158..f6451c5 100644 --- a/nextcloud.subfolder.conf.sample +++ b/nextcloud.subfolder.conf.sample @@ -37,4 +37,5 @@ location ^~ /nextcloud/ { proxy_set_header If-Range $http_if_range; proxy_redirect off; proxy_ssl_session_reuse off; + add_header Strict-Transport-Security "max-age=15552000; includeSubDomains; preload;"; }