Browse Source

Do not enable HSTS by default globally

Robert Zollner 6 years ago
parent
commit
9b544bee0e
1 changed files with 0 additions and 1 deletions
  1. 0 1
      install/deb/nginx/nginx.conf

+ 0 - 1
install/deb/nginx/nginx.conf

@@ -116,7 +116,6 @@ http {
     ssl_stapling_verify on;
     resolver 1.0.0.1 1.1.1.1 valid=300s;
     resolver_timeout    5s;
-    add_header          Strict-Transport-Security "max-age=31536000";
     add_header          X-Frame-Options SAMEORIGIN;
     add_header          X-Content-Type-Options nosniff;