summaryrefslogtreecommitdiff
path: root/microvms/nextcloud/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'microvms/nextcloud/default.nix')
-rw-r--r--microvms/nextcloud/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/microvms/nextcloud/default.nix b/microvms/nextcloud/default.nix
index e86ab53..93bb11d 100644
--- a/microvms/nextcloud/default.nix
+++ b/microvms/nextcloud/default.nix
@@ -34,6 +34,7 @@
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "none" always;
add_header X-XSS-Protection "1; mode=block" always;
+ add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
# Remove X-Powered-By, which is an information leak
fastcgi_hide_header X-Powered-By;