From 7ed13346710a56ec504d114c102e34f7f4d35253 Mon Sep 17 00:00:00 2001 From: Fabian Franz Date: Fri, 29 Mar 2019 17:46:25 +0100 Subject: [PATCH 1/2] www/nginx: fix HSTS header --- .../service/templates/OPNsense/Nginx/security_rule.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/security_rule.conf b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/security_rule.conf index 354db6121..73ab27993 100644 --- a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/security_rule.conf +++ b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/security_rule.conf @@ -12,7 +12,7 @@ {% endif %} {% if security_rule.strict_transport_security_time is defined %} {% do our_headers.append('Strict-Transport-Security') %} - add_header Strict-Transport-Security "{{ security_rule.strict_transport_security_time }}{% + add_header Strict-Transport-Security "max-age={{ security_rule.strict_transport_security_time }}{% if security_rule.strict_transport_security_include_subdomains is defined and security_rule.strict_transport_security_include_subdomains == '1' %}; includeSubDomains{% endif %}" always; {% endif %} From 89e96d28cc0ca6a56bd443a343c8880960d29674 Mon Sep 17 00:00:00 2001 From: Fabian Franz Date: Fri, 29 Mar 2019 17:49:22 +0100 Subject: [PATCH 2/2] www/nginx: release note --- www/nginx/pkg-descr | 1 + 1 file changed, 1 insertion(+) diff --git a/www/nginx/pkg-descr b/www/nginx/pkg-descr index b71c7593e..fecc24d89 100644 --- a/www/nginx/pkg-descr +++ b/www/nginx/pkg-descr @@ -11,6 +11,7 @@ Plugin Changelog 1.11 * add VTS(1) module for traffic status reports +* fix HSTS bug (1) https://github.com/vozlt/nginx-module-vts