03/08: hydra: bayfront: Add 'Strict-Transport-Security' for hpc.guix.info.

[Ludovic Courtès]

civodul pushed a commit to branch master
in repository maintenance.

commit c5aaa57d6953cd88ba351c383ac80c55f650eafb
Author: Ludovic Courtès <ludo@gnu.org>
AuthorDate: Mon Jun 6 11:17:38 2022 +0200

    hydra: bayfront: Add 'Strict-Transport-Security' for hpc.guix.info.
    
    * hydra/bayfront.scm (%hpc.guix.info-nginx-servers): Add
    'Strict-Transport-Security' header.
---
 hydra/bayfront.scm | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index d150334..dc8b81b 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -347,6 +347,9 @@ ssl_prefer_server_ciphers on;
 # as suggested at <https://weakdh.org/sysadmin.html>.
 ssl_dhparam         /etc/dhparams.pem;
 
+# Tell clients to keep using HTTPS.
+add_header Strict-Transport-Security max-age=15552000;
+
 access_log  /var/log/nginx/guix-hpc.access.log;"))
       (locations common-locations)))))