Adding HSTS ssl header back in, but wiht a max age of 0 to ensure cache busting.

This commit is contained in:
Samuel Clay 2014-10-29 12:12:29 -07:00
parent f094fc8422
commit 6fbebdded6

View file

@ -33,6 +33,7 @@ defaults
frontend public
bind :80
bind :443 ssl crt newsblur.pem ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-RSA-RC4-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES128-SHA:AES256-SHA256:AES256-SHA:RC4-SHA no-sslv3
rspadd Strict-Transport-Security:\ max-age=0;\ includeSubDomains
option http-server-close
# Redirect all HTTP traffic to HTTPS