preload hsts

diff --git a/etc/nginx/sites-available/default b/etc/nginx/sites-available/default
index ba9e3de23d50c25a59862a9f8fac0fef4e9f4d71..ab0a8ed069502251f424fbbad65d243ddd5d4adc 100644 (file)
--- a/etc/nginx/sites-available/default
+++ b/etc/nginx/sites-available/default
@@ -10,7 +10,7 @@ server {
   # listen [::]:80 ipv6only=on;
   listen 443 ssl http2 default_server;
   listen [::]:443 ssl ipv6only=on; # managed by Certbot
-  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
   ssl_stapling on;
   ssl_stapling_verify on;
   ssl_trusted_certificate /etc/ssl/private/ca-certs.pem;