Merge pull request #160 from betagouv/update/increment-hsts-600

Augmente le hsts max-age à 10 minutes
betagouv · Oct 18, 2023 · 815eebb · 815eebb
2 parents cacf436 + 4700dfe
commit 815eebb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/roles/bootstrap/templates/nginx_config.conf.j2 b/roles/bootstrap/templates/nginx_config.conf.j2
@@ -7,7 +7,7 @@
   ssl_certificate_key /etc/letsencrypt/live/{{ service_domain }}/privkey.pem;
   include snippets/ssl_params.conf;
 
-  add_header Strict-Transport-Security "max-age=300; includeSubDomains";
+  add_header Strict-Transport-Security "max-age=600; includeSubDomains";
 
 {%- endmacro %}