adding markdown docs and config load test

config/load_test.go

@@ -390,6 +390,27 @@ func TestLoad(t *testing.T) {
 				return cfg
 			},
 		},
+		{
+			args: []string{"-proxy.header.sts.maxage", "31536000"},
+			cfg: func(cfg *Config) *Config {
+				cfg.Proxy.STSHeader.MaxAge = 31536000
+				return cfg
+			},
+		},
+		{
+			args: []string{"-proxy.header.sts.subdomains", "true"},
+			cfg: func(cfg *Config) *Config {
+				cfg.Proxy.STSHeader.Subdomains = true
+				return cfg
+			},
+		},
+		{
+			args: []string{"-proxy.header.sts.preload", "true"},
+			cfg: func(cfg *Config) *Config {
+				cfg.Proxy.STSHeader.Preload = true
+				return cfg
+			},
+		},
 		{
 			args: []string{"-proxy.gzip.contenttype", `^text/.*$`},
 			cfg: func(cfg *Config) *Config {

docs/content/ref/proxy.header.sts.maxage.md

@@ -0,0 +1,11 @@
+---
+title: "proxy.header.sts.maxage"
+---
+
+`proxy.header.sts.maxage` enables and configures the max-age of HSTS for TLS requests.
+When set greater than zero this enables the Strict-Transport-Security header
+and sets the max-age value in the header.
+
+The default is
+
+    proxy.header.sts.maxage = 0

docs/content/ref/proxy.header.sts.preload.md

@@ -0,0 +1,17 @@
+---
+title: "proxy.header.sts.preload"
+---
+
+`proxy.header.sts.preload` instructs HSTS to include the preload directive.
+When set to true, the 'preload' option will be added to the
+Strict-Transport-Security header.
+
+Sending the preload directive from your site can have PERMANENT CONSEQUENCES
+and prevent users from accessing your site and any of its subdomains if you
+find you need to switch back to HTTP. Please read the details at
+[https://hstspreload.org/#removal](https://hstspreload.org/#removal)
+before sending the header with "preload".
+
+The default is
+
+    proxy.header.sts.preload = false

docs/content/ref/proxy.header.sts.subdomains.md

@@ -0,0 +1,11 @@
+---
+title: "proxy.header.sts.subdomains"
+---
+
+`proxy.header.sts.subdomains` instructs HSTS to include subdomains.
+When set to true, the 'includeSubDomains' option will be added to
+the Strict-Transport-Security header.
+
+The default is
+
+    proxy.header.sts.subdomains = false

fabio.properties

@@ -423,7 +423,7 @@
 # Sending the preload directive from your site can have PERMANENT CONSEQUENCES
 # and prevent users from accessing your site and any of its subdomains if you
 # find you need to switch back to HTTP. Please read the details at
-# hstspreload.appspot.com/#removal before sending the header with "preload".
+# https://hstspreload.org/#removal before sending the header with "preload".
 #
 # The default is
 #