From 280733bd93af564f84c3bb7bc045d00a5af25588 Mon Sep 17 00:00:00 2001
From: Christian Grothoff <christian@grothoff.org>
Date: Mon, 8 Aug 2016 16:05:10 +0200
Subject: use inline TLS config everywhere, enable includeSubDomains directive

---
 etc/nginx/conf.d/talerssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'etc/nginx/conf.d')

diff --git a/etc/nginx/conf.d/talerssl b/etc/nginx/conf.d/talerssl
index 3deae2c..1f6aacb 100644
--- a/etc/nginx/conf.d/talerssl
+++ b/etc/nginx/conf.d/talerssl
@@ -6,4 +6,4 @@ ssl_dhparam /etc/ssl/certs/dhparam.pem;
 ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
 ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
 
-add_header Strict-Transport-Security "max-age=63072000; preload";
+add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
-- 
cgit v1.2.3