From: Silvio Rhatto <rhatto@riseup.net>
Date: Mon, 5 Dec 2011 20:36:14 +0000 (-0200)
Subject: Including subdomains at HSTS header
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=fd5241b13a279812c6f993cdd115c94359d29b3e;p=puppet-bootstrap.git

Including subdomains at HSTS header
---

diff --git a/templates/etc/nginx/domain.erb b/templates/etc/nginx/domain.erb
index 5e45ec8..3cddd5b 100644
--- a/templates/etc/nginx/domain.erb
+++ b/templates/etc/nginx/domain.erb
@@ -16,7 +16,7 @@ server {
   server_name  *.<%= domain %> <%= domain %>
 
   # enable HSTS header
-  add_header Strict-Transport-Security max-age=15768000;
+  add_header Strict-Transport-Security "max-age=15768000; includeSubdomains";
 
   # https redirection by default
   rewrite ^(.*)      https://$host$1 redirect;