3 ms·
In addition to your configs I had to enable HSTS to achieve an A+ Add to a server section: add_header Strict-Transport-Security "max-age=31536000; includeSub
by bryogenic 12y ago
In addition to your configs I had to enable HSTS to achieve an A+
Add to a server section:
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
- nodesocket 12y agoWe left out http headers, because that usually can be done at the application level, or in location{} blocks in nginx. I wouldn't recommend setting headers globally in http{}.