From 754f5206421b9505cdff687841892684a54f975b Mon Sep 17 00:00:00 2001 From: James Hannah Date: Thu, 3 Nov 2016 09:57:02 +0000 Subject: [PATCH] Fix HSTS config to make HSTS work by default Fixes #46 --- httpd/apache.d/ssl.template.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/httpd/apache.d/ssl.template.erb b/httpd/apache.d/ssl.template.erb index af35169f..2bb49b4b 100644 --- a/httpd/apache.d/ssl.template.erb +++ b/httpd/apache.d/ssl.template.erb @@ -59,7 +59,7 @@ SSLStaplingReturnResponderErrors off % if mandatory_ssl? - + # HSTS (mod_headers is required) (15768000 seconds = 6 months) Header always set Strict-Transport-Security "max-age=15768000"