From e90e3153f8216c6a1ce39f0e213264332af4b272 Mon Sep 17 00:00:00 2001
From: Vincent Ambo <tazjin@google.com>
Date: Sat, 4 Apr 2020 21:46:16 +0100
Subject: chore(ops/nixos/camden): Enable HSTS headers on *.tazj.in

---
 ops/nixos/camden/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ops/nixos/camden/default.nix b/ops/nixos/camden/default.nix
index cb8f1c2188..1a06a5e7b8 100644
--- a/ops/nixos/camden/default.nix
+++ b/ops/nixos/camden/default.nix
@@ -228,6 +228,8 @@ in lib.fix(self: {
       extraConfig = ''
         ${depot.web.blog.oldRedirects}
 
+        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
+
         location ~* \.(webp|woff2)$ {
           add_header Cache-Control "public, max-age=31536000";
         }
-- 
cgit 1.4.1