set $hsts_header_value "";

if ($scheme = "https") {
	set $hsts_header_value "max-age=31536000; includeSubDomains";
}

add_header	Strict-Transport-Security $hsts_header_value always;