Enabling HSTS with Nginx

Add this in your site configuration (or nginx.conf):

add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload;";  
comments powered by Disqus