lighttpd: set HSTS max-age to 1 year (#4976)

This commit is contained in:
Maurice Walker 2021-05-06 09:19:55 +02:00 committed by GitHub
parent 05d3224e70
commit e780346dbd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -412,7 +412,7 @@ EOD;
if (!empty($config['system']['webgui']['ssl-hsts'])) {
$lighty_config .= "\$HTTP[\"scheme\"] == \"https\" {\n";
$lighty_config .= " setenv.add-response-header = (\"Strict-Transport-Security\" => \"max-age=15768000\" )\n";
$lighty_config .= " setenv.add-response-header = (\"Strict-Transport-Security\" => \"max-age=31536000\" )\n";
$lighty_config .= "}\n";
}