From 66d721b9e75193ec046b821d5d8c29cf0bf798c2 Mon Sep 17 00:00:00 2001 From: frju365 Date: Wed, 31 Jan 2024 01:09:20 +0100 Subject: [PATCH] Modify HSTS policy duration to 1 year --- conf/nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 369c117..5a105b1 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -55,7 +55,7 @@ location ^~ __PATH__/ { client_body_buffer_size 512k; # HTTP response headers borrowed from Nextcloud `.htaccess` - more_set_headers "Strict-Transport-Security: max-age=15768000; includeSubDomains; preload;"; + more_set_headers "Strict-Transport-Security: max-age=63072000; includeSubDomains; preload;"; more_set_headers "Referrer-Policy: no-referrer"; more_set_headers "X-Content-Type-Options: nosniff"; more_set_headers "X-Download-Options: noopen";