Merge pull request #7664 from bbodenmiller/patch-2

add HSTS Policy warning

Merge pull request #7664 from bbodenmiller/patch-2
0cc30145 · Sytse Sijbrandij · f74dba8c · 765eabea · 0cc30145
Commit 0cc30145 authored Oct 03, 2014 by Sytse Sijbrandij
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

gitlab-ssl lib/support/nginx/gitlab-ssl +2 -0

No files found.
--- a/lib/support/nginx/gitlab-ssl
+++ b/lib/support/nginx/gitlab-ssl
@@ -72,6 +72,8 @@ server {

  ssl_prefer_server_ciphers   on;

+  ## [WARNING] The following header states that the browser should only communicate 
+  ## with your server over a secure connection for the next 24 months.
  add_header Strict-Transport-Security max-age=63072000;
  add_header X-Frame-Options SAMEORIGIN;
  add_header X-Content-Type-Options nosniff;