Including subdomains at HSTS header

diff --git a/templates/etc/nginx/domain.erb b/templates/etc/nginx/domain.erb
index 5e45ec81278414af6cd2c0422941599602bb64da..3cddd5ba007e809a1bf616ef0b1f1cf24b35c63f 100644 (file)
--- a/templates/etc/nginx/domain.erb
+++ b/templates/etc/nginx/domain.erb
@@ -16,7 +16,7 @@ server {
   server_name  *.<%= domain %> <%= domain %>
 
   # enable HSTS header
-  add_header Strict-Transport-Security max-age=15768000;
+  add_header Strict-Transport-Security "max-age=15768000; includeSubdomains";
 
   # https redirection by default
   rewrite ^(.*)      https://$host$1 redirect;