diff --git a/Caddyfile b/Caddyfile index d892524..f6725e9 100644 --- a/Caddyfile +++ b/Caddyfile @@ -65,6 +65,11 @@ header { # Comment header to allow indexing by search engines X-Robots-Tag "noindex, nofollow, noarchive, nositelinkssearchbox, nosnippet, notranslate, noimageindex" + + # enable HSTS + # WARNING: Once this value is set, the site must continue to support HTTPS until the expiry time is reached. + + # Strict-Transport-Security max-age=15768000; # Remove "Server" header -Server