From 0668e5cda5caa87d7637ad44e0222095900faeef Mon Sep 17 00:00:00 2001
From: Philip Henning <philip.henning@base23.de>
Date: Tue, 19 Nov 2024 15:52:33 +0100
Subject: [PATCH] enable hsts

---
 data/nginx/default.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/data/nginx/default.conf.template b/data/nginx/default.conf.template
index 7d70fd9..74d8f53 100644
--- a/data/nginx/default.conf.template
+++ b/data/nginx/default.conf.template
@@ -64,7 +64,7 @@ server {
 	ssl_prefer_server_ciphers ${NGINX_SSL_PREFER_SERVER_CIPHERS};
 
 	# HSTS (ngx_http_headers_module is required) (63072000 seconds)
-	#add_header Strict-Transport-Security ${NGINX_HEADER_STRICT_TRANSPORT_SECURITY};
+	add_header Strict-Transport-Security ${NGINX_HEADER_STRICT_TRANSPORT_SECURITY};
 
 	# OCSP stapling
 	ssl_stapling ${NGINX_SSL_STAPLING};