add HSTS headers in NGINX conf file

[samcharles93]

Headers to be added to nginx conf file, to enable HSTS

add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";

[SS88UK]

I agree, I have this set-up however, should they let the certificate expire, they can no longer browse the website because Chrome blocks access without a valid certificate. Not sure about other browsers.