diff --git a/www/nginx/pkg-descr b/www/nginx/pkg-descr index b71c7593e..fecc24d89 100644 --- a/www/nginx/pkg-descr +++ b/www/nginx/pkg-descr @@ -11,6 +11,7 @@ Plugin Changelog 1.11 * add VTS(1) module for traffic status reports +* fix HSTS bug (1) https://github.com/vozlt/nginx-module-vts diff --git a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/security_rule.conf b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/security_rule.conf index 354db6121..73ab27993 100644 --- a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/security_rule.conf +++ b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/security_rule.conf @@ -12,7 +12,7 @@ {% endif %} {% if security_rule.strict_transport_security_time is defined %} {% do our_headers.append('Strict-Transport-Security') %} - add_header Strict-Transport-Security "{{ security_rule.strict_transport_security_time }}{% + add_header Strict-Transport-Security "max-age={{ security_rule.strict_transport_security_time }}{% if security_rule.strict_transport_security_include_subdomains is defined and security_rule.strict_transport_security_include_subdomains == '1' %}; includeSubDomains{% endif %}" always; {% endif %}