From e6625501e7bc0ddd42bc51393a3ddf2c84495a71 Mon Sep 17 00:00:00 2001 From: andryyy Date: Mon, 12 Nov 2018 09:53:18 +0100 Subject: [PATCH] [Nginx] Remove Strict-Transport-Security for subdomains (prevented autoconfig from working without TLS) --- data/conf/nginx/site.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/data/conf/nginx/site.conf b/data/conf/nginx/site.conf index d00ff778..67d6f1a1 100644 --- a/data/conf/nginx/site.conf +++ b/data/conf/nginx/site.conf @@ -30,7 +30,7 @@ server { ssl_session_timeout 1d; ssl_session_tickets off; - add_header Strict-Transport-Security "max-age=15768000; includeSubDomains"; + add_header Strict-Transport-Security "max-age=15768000;"; add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection "1; mode=block"; add_header X-Robots-Tag none;