From: Silvio Rhatto <rhatto@riseup.net>
Date: Tue, 3 May 2016 15:43:32 +0000 (-0300)
Subject: Preload HSTS
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=c8a14cad53f307fceb5be31031d959d887007337;p=puppet-bootstrap.git

Preload HSTS
---

diff --git a/templates/etc/nginx/domain.erb b/templates/etc/nginx/domain.erb
index 80a3ad5..06cb0ee 100644
--- a/templates/etc/nginx/domain.erb
+++ b/templates/etc/nginx/domain.erb
@@ -26,7 +26,7 @@ server {
   server_name  *.<%= domain %> <%= domain %>
 
   # enable HSTS header
-  add_header Strict-Transport-Security "max-age=15768000; includeSubdomains";
+  add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload";
 
   # https redirection by default
   rewrite ^(.*)      https://$host$1 redirect;