nice. how about hsts?
porn
joined 1 year ago
Can you please make http://shota.nu redirect to https? enabling hsts would also be nice.
First experience I had was typing it out from memory, seeing the blank nginx page, and looking up the announcement post thinking I had misremembered.
example nginx config
server {
listen 80;
#server_name shota.nu;
return 301 https://$server_name$request_uri;
}
server {
#listen 443 ssl;
#server_name shota.nu;
# max-age of 15768000 and over will get hsts permanently compiled into some static lists!
# If you're unsure about maybe disabling it later, reduce it to say 7884000
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
}
Also you may wanna add server_tokens off; to your html{} block if you don't want to show off your 3 year old nginx that has been deprecated since 2021.
looking good, thx