From d2a2bb28f84953e2cbc3d5c3ae4ad4fdf3f0eb82 Mon Sep 17 00:00:00 2001 From: Bob van de Vijver Date: Tue, 31 Mar 2026 20:55:59 +0200 Subject: [PATCH] Update HSTS max-age to 31536000 seconds The recommendation is to use at least 1 year for this value, which is checked by scanners such as https://internet.nl/. --- data/conf/nginx/templates/sites-default.conf.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/data/conf/nginx/templates/sites-default.conf.j2 b/data/conf/nginx/templates/sites-default.conf.j2 index 84bd8eae4..6904d185e 100644 --- a/data/conf/nginx/templates/sites-default.conf.j2 +++ b/data/conf/nginx/templates/sites-default.conf.j2 @@ -12,7 +12,7 @@ ssl_session_cache shared:SSL:50m; ssl_session_timeout 1d; ssl_session_tickets off; -add_header Strict-Transport-Security "max-age=15768000;"; +add_header Strict-Transport-Security "max-age=31536000;"; add_header X-Content-Type-Options nosniff; add_header X-Robots-Tag none; add_header X-Download-Options noopen;