Enable HTTP Strict Transport Security.

This is added for security purposes and in order to suppress the "The "Strict-Transport-Security" HTTP header is not set to at least "15552000" seconds." warning in Nextcloud's security scan.
This commit is contained in:
Christian Anguiano 2019-04-23 13:57:03 -07:00 committed by GitHub
commit a36b855715
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -22,6 +22,8 @@ server {
client_max_body_size 0; client_max_body_size 0;
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains";
location / { location / {
include /config/nginx/proxy.conf; include /config/nginx/proxy.conf;
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;