diff modules/website/templates/https_core_conf.erb @ 373:c68883dde00b

Increase HSTS header duration Apparently 6 months isn't long enough and we need at least 12
author IBBoard <dev@ibboard.co.uk>
date Tue, 15 Jun 2021 19:30:24 +0100
parents 94f34831132d
children
line wrap: on
line diff
--- a/modules/website/templates/https_core_conf.erb	Sat Apr 24 11:12:33 2021 +0100
+++ b/modules/website/templates/https_core_conf.erb	Tue Jun 15 19:30:24 2021 +0100
@@ -1,4 +1,4 @@
-Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"
+Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
 <%- if @csp -%>
 Header always set Content-Security-Policy "upgrade-insecure-requests; <%= @csp_string %>"
 <%- end -%>