From 813c273e687d57e284aae8daec9ec7bd1196eecc Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Sat, 21 Nov 2015 20:50:02 +0100 Subject: [PATCH] [varnish] Add HSTS header on redirect --- varnish/default.vcl | 1 + 1 file changed, 1 insertion(+) diff --git a/varnish/default.vcl b/varnish/default.vcl index cd726aff3..a06bb744b 100644 --- a/varnish/default.vcl +++ b/varnish/default.vcl @@ -47,6 +47,7 @@ sub vcl_synth { # Execute TLS or www. redirect if (resp.status == 750) { set resp.http.Location = "https://www.tazj.in" + req.url; + set resp.http.Strict-Transport-Security = "max-age=31536000;includeSubdomains;preload"; set resp.status = 301; return (deliver); }