summaryrefslogtreecommitdiff
path: root/etc/nginx/conf.d/talerssl
diff options
context:
space:
mode:
authorChristian Grothoff <christian@grothoff.org>2016-08-08 16:05:10 +0200
committerChristian Grothoff <christian@grothoff.org>2016-08-08 16:05:10 +0200
commit280733bd93af564f84c3bb7bc045d00a5af25588 (patch)
tree0d01a9cec9706007252c9b62fcee60d8408fd08d /etc/nginx/conf.d/talerssl
parente4ac947e23cf2d1ce4a4e280ec9f89d6a098b99a (diff)
downloaddeployment-280733bd93af564f84c3bb7bc045d00a5af25588.tar.gz
deployment-280733bd93af564f84c3bb7bc045d00a5af25588.tar.bz2
deployment-280733bd93af564f84c3bb7bc045d00a5af25588.zip
use inline TLS config everywhere, enable includeSubDomains directive
Diffstat (limited to 'etc/nginx/conf.d/talerssl')
-rw-r--r--etc/nginx/conf.d/talerssl2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/nginx/conf.d/talerssl b/etc/nginx/conf.d/talerssl
index 3deae2c..1f6aacb 100644
--- a/etc/nginx/conf.d/talerssl
+++ b/etc/nginx/conf.d/talerssl
@@ -6,4 +6,4 @@ ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
-add_header Strict-Transport-Security "max-age=63072000; preload";
+add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";