set hsts to at least "15552000" seconds in ipconfig

Discussion in 'ISPConfig 3 Priority Support' started by tlove, Apr 25, 2021.

  1. tlove

    tlove New Member HowtoForge Supporter

    Hello, I feel sure this has been answered before but I haven't been able to find it. A nextcloud instance on my ISPCONFIG server is requiring hsts to be set and I'm unclear exactly how to do this in ISPCONFIG. Also is the mod-headers extension installed or do I have to install it? I welcome any advice.
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Are you using Apache2? If so, you can add a .htaccess file or add it to the Apache directives for your site under the web settings -> Options:
    Code:
    <IfModule mod_headers.c>
    Header always set Strict-Transport-Security "max-age=31536000"
    </IfModule>
     
  3. Taleman

    Taleman Well-Known Member HowtoForge Supporter

  4. tlove

    tlove New Member HowtoForge Supporter

    Many thanks
     
  5. tlove

    tlove New Member HowtoForge Supporter

    Thank you Taleman for the search engine tip. In my doziness (its late at night here) I was trying to search HowtoForge directly
     

Share This Page