diff --git a/nginx.conf b/nginx.conf index 8dd15fe..54f9e0a 100644 --- a/nginx.conf +++ b/nginx.conf @@ -19,4 +19,5 @@ server { add_header X-Content-Type-Options "nosniff" always; add_header X-XSS-Protection "1; mode=block" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always; + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; }