about summary refs log tree commit diff
path: root/nixos/modules
diff options
context:
space:
mode:
authorAaron Andersen <aaron@fosslib.net>2019-10-26 12:34:36 -0400
committerGitHub <noreply@github.com>2019-10-26 12:34:36 -0400
commit33474166e38d19f1a42d5a102d5db6d671dfdf2f (patch)
treeda36bc230811e308bd210e42ef8ae1ad13229ed7 /nixos/modules
parent03470789498a3a6b5ea4e525d06191815a0978f7 (diff)
parent4590a2380efb49da0a4fdb60890537ebc408b31e (diff)
downloadnixlib-33474166e38d19f1a42d5a102d5db6d671dfdf2f.tar
nixlib-33474166e38d19f1a42d5a102d5db6d671dfdf2f.tar.gz
nixlib-33474166e38d19f1a42d5a102d5db6d671dfdf2f.tar.bz2
nixlib-33474166e38d19f1a42d5a102d5db6d671dfdf2f.tar.lz
nixlib-33474166e38d19f1a42d5a102d5db6d671dfdf2f.tar.xz
nixlib-33474166e38d19f1a42d5a102d5db6d671dfdf2f.tar.zst
nixlib-33474166e38d19f1a42d5a102d5db6d671dfdf2f.zip
Merge pull request #69436 from tshaynik/fix/nextcloud-nginx-sts
nixos/nextcloud: add Strict-Transport-Security
Diffstat (limited to 'nixos/modules')
-rw-r--r--nixos/modules/services/web-apps/nextcloud.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/services/web-apps/nextcloud.nix b/nixos/modules/services/web-apps/nextcloud.nix
index b40abf5e615b..b9186a1dc07f 100644
--- a/nixos/modules/services/web-apps/nextcloud.nix
+++ b/nixos/modules/services/web-apps/nextcloud.nix
@@ -532,6 +532,7 @@ in {
               add_header X-Download-Options noopen;
               add_header X-Permitted-Cross-Domain-Policies none;
               add_header Referrer-Policy no-referrer;
+              add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
               error_page 403 /core/templates/403.php;
               error_page 404 /core/templates/404.php;
               client_max_body_size ${cfg.maxUploadSize};