Merge pull request #1284 from opnsense/ngx_hsts_bug

www/nginx HSTS bug

www/nginx/pkg-descr

@@ -11,6 +11,7 @@ Plugin Changelog
 1.11
 
 * add VTS(1) module for traffic status reports
+* fix HSTS bug
 
 (1) https://github.com/vozlt/nginx-module-vts
 

www/nginx/src/opnsense/service/templates/OPNsense/Nginx/security_rule.conf

@@ -12,7 +12,7 @@
 {% endif %}
 {% if security_rule.strict_transport_security_time is defined %}
 {% do our_headers.append('Strict-Transport-Security') %}
-    add_header Strict-Transport-Security "{{ security_rule.strict_transport_security_time }}{%
+    add_header Strict-Transport-Security "max-age={{ security_rule.strict_transport_security_time }}{%
   if security_rule.strict_transport_security_include_subdomains is defined and
      security_rule.strict_transport_security_include_subdomains == '1' %}; includeSubDomains{% endif %}" always;
 {% endif %}