diff options
| author | Grigory Shipunov | 2023-01-14 13:21:12 +0100 |
|---|---|---|
| committer | Grigory Shipunov | 2023-01-14 13:21:12 +0100 |
| commit | 3ddfc838023dbbcd6eb89509b37baed80114e6d6 (patch) | |
| tree | 17d4eff25d7e162cfc4d4d39b4fd0a6b404ae679 /microvms | |
| parent | eabc64290a948aeca298dd3d6d75373e3e914cbd (diff) | |
add strict transport security header
Diffstat (limited to 'microvms')
| -rw-r--r-- | microvms/nextcloud/default.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/microvms/nextcloud/default.nix b/microvms/nextcloud/default.nix index e86ab53..93bb11d 100644 --- a/microvms/nextcloud/default.nix +++ b/microvms/nextcloud/default.nix @@ -34,6 +34,7 @@ add_header X-Permitted-Cross-Domain-Policies "none" always; add_header X-Robots-Tag "none" always; add_header X-XSS-Protection "1; mode=block" always; + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; # Remove X-Powered-By, which is an information leak fastcgi_hide_header X-Powered-By; |