Interanet/jitsi-meet-deployment
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

web: Add ENABLE_HSTS flag to disable strict-transport-security header

Browse Source
This commit is contained in:
Cosmo Myzrail Gorynych aka CoMiGo
2020-12-17 20:32:54 +12:00
committed by GitHub
parent f8560371f5
commit 0b2514101c
3 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web/rootfs/defaults/ssl.conf
View File

@@ -23,4 +23,6 @@ ssl_prefer_server_ciphers off;
ssl_dhparam /defaults/ffdhe2048.txt;
# HSTS (ngx_http_headers_module is required) (63072000 seconds)
{{ if .Env.ENABLE_HSTS | default "1" | toBool }}
add_header Strict-Transport-Security "max-age=63072000" always;
{{ end }}