Enable HTTP Strict Transport Security

robertkwild · 10-27-2017, 08:54 AM

hi all,

got a warning on my nextcloud server saying i need to do the above but reading through the manual -

https://docs.nextcloud.com/server/12...en_server.html

where do you add those lines to, is it the -

/etc/httpd/conf/httpd.conf

or here

/etc/httpd/conf.d/ssl.conf

many thanks,

rob

robertkwild · 10-27-2017, 10:57 AM

got it working, i didnt need all the information required, as some where duplicates in the ssl.conf file so all i needed was the below, i put it in between the two virtual host tags -

<IfModule mod_headers.c>

Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"

</IfModule>