hsts: increase age to 6 months
Graham Christensen committed
Jul 31, 2017 at 21:24 UTC
25b3ad29bb3d9394550c2f027c56527fb1f606cc
2 files changed
+2
-2
delft/hydra-proxy.nix
+1
-1
@@ -74,7 +74,7 @@ in
74
# Required by Catalyst.
75
RequestHeader set X-Forwarded-Proto https
76
RequestHeader set X-Forwarded-Port 443
77
- Header always set Strict-Transport-Security "max-age=86400"
77
+ Header always set Strict-Transport-Security "max-age=15552000"
78
'';
79
}
80
];
nixos-org/webserver.nix
+1
-1
@@ -133,7 +133,7 @@ in
133
sslServerCert = "${acmeKeyDir}/fullchain.pem";
134
extraConfig = nixosVHostConfig.extraConfig +
135
''
136
- Header always set Strict-Transport-Security "max-age=86400"
136
+ Header always set Strict-Transport-Security "max-age=15552000"
137
SSLProtocol All -SSLv2 -SSLv3
138
SSLCipherSuite HIGH:!aNULL:!MD5:!EXP
139
SSLHonorCipherOrder on