nginx-proxy-manager-zh/backend/templates/_hsts.conf

{% if certificate and certificate_id > 0 -%}
{% if ssl_forced == 1 or ssl_forced == true %}
{% if hsts_enabled == 1 or hsts_enabled == true %}
  # HSTS (ngx_http_headers_module is required) (63072000 seconds = 2 years)
  add_header Strict-Transport-Security $hsts_header always;
{% endif %}
{% endif %}
{% endif %}
Fixes #68 - HSTS is now part of the UI 2019-02-18 03:21:45 -05:00			`{% if certificate and certificate_id > 0 -%}`
			`{% if ssl_forced == 1 or ssl_forced == true %}`
			`{% if hsts_enabled == 1 or hsts_enabled == true %}`
Update _hsts.conf template I propose the change to max-age value of HSTS from 1 year to 2 years. 2021-03-13 07:40:47 -05:00			`# HSTS (ngx_http_headers_module is required) (63072000 seconds = 2 years)`
only add hsts header with https. fixes https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1005 for more information look at: https://websistent.com/add-the-hsts-header-only-for-https-requests-nginx/ 2023-12-01 21:26:34 -05:00			`add_header Strict-Transport-Security $hsts_header always;`
Update _hsts.conf template I propose the change to max-age value of HSTS from 1 year to 2 years. 2021-03-13 07:40:47 -05:00			`{% endif %}`
Fixes #68 - HSTS is now part of the UI 2019-02-18 03:21:45 -05:00			`{% endif %}`
			`{% endif %}`