From fd5241b13a279812c6f993cdd115c94359d29b3e Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Mon, 5 Dec 2011 18:36:14 -0200
Subject: Including subdomains at HSTS header

---
 templates/etc/nginx/domain.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'templates/etc/nginx')

diff --git a/templates/etc/nginx/domain.erb b/templates/etc/nginx/domain.erb
index 5e45ec8..3cddd5b 100644
--- a/templates/etc/nginx/domain.erb
+++ b/templates/etc/nginx/domain.erb
@@ -16,7 +16,7 @@ server {
   server_name  *.<%= domain %> <%= domain %>
 
   # enable HSTS header
-  add_header Strict-Transport-Security max-age=15768000;
+  add_header Strict-Transport-Security "max-age=15768000; includeSubdomains";
 
   # https redirection by default
   rewrite ^(.*)      https://$host$1 redirect;
-- 
cgit v1.2.3