Removes the includeSubDomains directive from HSTS

This commit is contained in:
wxcafé 2017-04-14 02:00:01 +02:00 committed by GitHub
parent f2814435d5
commit 368d815e4d
1 changed files with 1 additions and 1 deletions

View File

@ -32,7 +32,7 @@ server {
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
add_header Strict-Transport-Security "max-age=31536000";
keepalive_timeout 70;
sendfile on;