Add HSTS to the control panel headers (#879)

2016-07-29 15:01:40 +02:00 · 2016-07-29 15:01:40 +02:00 · 4e3cfead46
parent 8844a9185f
commit 4e3cfead46
1 changed files with 1 additions and 0 deletions
--- a/conf/nginx-primaryonly.conf
+++ b/conf/nginx-primaryonly.conf
@ -9,6 +9,7 @@
 		add_header X-Frame-Options "DENY";
 		add_header X-Content-Type-Options nosniff;
 		add_header Content-Security-Policy "frame-ancestors 'none';";
+		add_header Strict-Transport-Security max-age=31536000;
 	}

 	# ownCloud configuration.