Verified Commit 0c48d7a0 authored by Elias Ojala's avatar Elias Ojala
Browse files

Certbot: HSTS Preloading

parent 4be968c0
......@@ -114,8 +114,12 @@ filename: `/etc/nginx/snippets/ssl/example.com.conf`
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
# Replace with the domain's HSTS policy
# Normal HSTS policy. Remove if you use preload one.
add_header Strict-Transport-Security "max-age=63072000" always;
# This forces your domain's all subdomains to HTTPS.
# Please submit to your domain to https://hstspreload.org/ if you select this option.
#add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
```
## SSL params
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment