Explorar o código

[Nginx] Remove Strict-Transport-Security for subdomains (prevented autoconfig from working without TLS)

andryyy %!s(int64=7) %!d(string=hai) anos
pai
achega
e6625501e7
Modificáronse 1 ficheiros con 1 adicións e 1 borrados
  1. 1 1
      data/conf/nginx/site.conf

+ 1 - 1
data/conf/nginx/site.conf

@@ -30,7 +30,7 @@ server {
   ssl_session_timeout 1d;
   ssl_session_tickets off;
 
-  add_header Strict-Transport-Security "max-age=15768000; includeSubDomains";
+  add_header Strict-Transport-Security "max-age=15768000;";
   add_header X-Content-Type-Options nosniff;
   add_header X-XSS-Protection "1; mode=block";
   add_header X-Robots-Tag none;