enable HSTS on api server

diff --git a/etc/nginx/conf.d/default.conf b/etc/nginx/conf.d/default.conf
index 8efb6a6737d4d38cd8307f0ef272f8ef44f48e18..12f5404392f31baf55704265b5d622fdd9200c23 100644 (file)
--- a/etc/nginx/conf.d/default.conf
+++ b/etc/nginx/conf.d/default.conf
@@ -11,7 +11,8 @@ server {
   server_name api-dev.nutra.tk api.dev.nutra.tk;
   #listen 80;
   listen 443 ssl http2;
-  resolver 127.0.0.1;
+  # HSTS
+  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
 
   # Sanic
   location / {