add HSTS header

This commit is contained in:
Sami Samhuri 2018-05-28 18:47:36 -07:00
parent 263ea16e00
commit bfae83019b

View file

@ -23,6 +23,8 @@ ExpiresDefault A259200
Header append Cache-Control "private, must-revalidate" Header append Cache-Control "private, must-revalidate"
</FilesMatch> </FilesMatch>
# Add HSTS header https://tools.ietf.org/html/rfc6797
Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" env=HTTPS
################ ################
### Rewrites ### ### Rewrites ###