From b6956dc0c6f9f65ca20ebcbc333ab2e900e64d4b Mon Sep 17 00:00:00 2001
From: dallaslu <dallaslu@noreply.forge.st>
Date: Fri, 5 Jun 2026 04:24:47 +0000
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=20ssl/hsts.conf?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ssl/hsts.conf | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 ssl/hsts.conf

diff --git a/ssl/hsts.conf b/ssl/hsts.conf
new file mode 100644
index 0000000..f6ea9a5
--- /dev/null
+++ b/ssl/hsts.conf
@@ -0,0 +1,7 @@
+set $hsts_header_value "";
+
+if ($scheme = "https") {
+	set $hsts_header_value "max-age=31536000; includeSubDomains; preload";
+}
+
+add_header	Strict-Transport-Security $hsts_header_value;
\ No newline at end of file