Adding security headers for NginX

2020-01-08 19:21:43 +01:00
parent 369bd4fc62
commit 2c8d784fd7
3 changed files with 10 additions and 0 deletions
--- a/roles/nginx/templates/vhosts/o.libertus.eu.conf.j2
+++ b/roles/nginx/templates/vhosts/o.libertus.eu.conf.j2
@@ -1,6 +1,7 @@
 server {
 {% include './templates/header.conf.j2' %}
 	
+	add_header Strict-Transport-Security "max-age=15768000" always;
 	add_header X-Content-Type-Options nosniff;
 	add_header X-XSS-Protection "1; mode=block";
 	add_header X-Robots-Tag none;