khanh.pndc/nextcloud-docs
1
0
Fork 0
mirror of https://github.com/nextcloud/documentation.git synced 2026-01-03 02:09:45 +07:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1214 from owncloud/LukasReschke-patch-1

Browse Source 
Add includeSubDomains + preload recommendation
This commit is contained in:
Carla Schroder
2015-06-15 12:03:44 -07:00
parent c0b5d576f6 6de4952a6b
commit e21079a291
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
admin_manual/configuration_server/harden_server.rst
View File

@@ -119,10 +119,15 @@ VirtualHost file:
<VirtualHost *:443>
ServerName cloud.owncloud.com
Header always add Strict-Transport-Security "max-age=15768000"
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
</VirtualHost>
It shall be noted that this requires that the ``mod_headers`` extension to be installed.
Be aware that above policy will also apply for all subdomains, if you don't
have HTTPS properly configured on all subdomains you mut remove the ``includeSubdomains``
part.
Furthermore it shall be noted that this requires that the ``mod_headers``
extension is installed.
Proper SSL configuration
************************