chore(ops/nixos/camden): Enable HSTS headers on *.tazj.in

This commit is contained in:
Vincent Ambo 2020-04-04 21:46:16 +01:00
parent f9063bc75d
commit e90e3153f8

View file

@ -228,6 +228,8 @@ in lib.fix(self: {
extraConfig = ''
${depot.web.blog.oldRedirects}
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
location ~* \.(webp|woff2)$ {
add_header Cache-Control "public, max-age=31536000";
}