debian/config-dir/conf-available/hsts.conf


1
2
3
4
5
6
7

# /etc/apache2/conf-available/hsts.conf

<IfModule mod_ssl.c>
	<IfModule mod_headers.c>
		Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
	</IfModule>
</IfModule>