CC-34246 Added strict transport security header for the static conten…

…t. (#521) * CC-34246: added strict transport security header for the static content * CC-34246: revert unneeded changes
spryker · Oct 21, 2024 · ac17ea9 · ac17ea9
1 parent 8fde354
commit ac17ea9
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/generator/src/templates/nginx/http/static.conf.twig b/generator/src/templates/nginx/http/static.conf.twig
@@ -5,6 +5,7 @@
         expires     7d;
         add_header  Pragma public;
         add_header  Cache-Control "public, must-revalidate, proxy-revalidate";
+        add_header  Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
         etag on;
         try_files   $uri @assets;
     }
@@ -19,6 +20,7 @@
         access_log        off;
         add_header        Last-Modified 'Thu, 01 Jan 1970 00:00:00 GMT';
         add_header        Cache-Control 'no-store, no-cache';
+        add_header  Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
         if_modified_since off;
         expires           off;
         etag              off;