Oier Bravo Urtasun a6155819b6 feat(nginx): enforce HTTPS-only with HSTS ...

Add Strict-Transport-Security (max-age 1y, includeSubDomains) to every TLS
server block in both vhost templates. Combined with the existing port-80
301 redirect, browsers refuse plain HTTP to these names after first visit.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-09 01:21:17 +02:00

5.2 KiB

Raw Blame History

View Raw