about summary refs log tree commit diff
diff options
context:
space:
mode:
authorVincent Ambo <tazjin@google.com>2020-04-04T20·46+0100
committerVincent Ambo <tazjin@google.com>2020-04-04T20·49+0100
commite90e3153f8216c6a1ce39f0e213264332af4b272 (patch)
treeaa168222446cd394ccb1698925ae87835dff2cbf
parentf9063bc75de968007279cc2c355ab89e7fe7779e (diff)
chore(ops/nixos/camden): Enable HSTS headers on *.tazj.in r/626
-rw-r--r--ops/nixos/camden/default.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/ops/nixos/camden/default.nix b/ops/nixos/camden/default.nix
index cb8f1c2188..1a06a5e7b8 100644
--- a/ops/nixos/camden/default.nix
+++ b/ops/nixos/camden/default.nix
@@ -228,6 +228,8 @@ in lib.fix(self: {
       extraConfig = ''
         ${depot.web.blog.oldRedirects}
 
+        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
+
         location ~* \.(webp|woff2)$ {
           add_header Cache-Control "public, max-age=31536000";
         }