From b45896ad324d6d4982748c3a67109e86a8da25c6 Mon Sep 17 00:00:00 2001
From: steering7253
Date: Wed, 1 Jul 2026 17:51:37 -0600
Subject: hsts

---
 nginx.conf | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/nginx.conf b/nginx.conf
index ac20e4a..66f5801 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -1,4 +1,3 @@
-
 user nginx nginx;
 worker_processes 1;
 
@@ -10,6 +9,7 @@ events {
 }
 
 http {
+	add_header_inherit merge;
 	include /etc/nginx/mime.types.nginx;
 	charset utf-8;
 	types_hash_max_size 4096;
@@ -109,6 +109,8 @@ http {
 		location /.well-known/ {
 			root /var/www/localhost/htdocs;
 		}
+
+		add_header Strict-Transport-Security "max-age=86400; includeSubDomains; preload" always;
 	}
 
 	server {
@@ -120,6 +122,8 @@ http {
 		ssl_certificate_key /etc/letsencrypt/live/cgit.space/privkey.pem;
 
 		include server.conf;
+
+		add_header Strict-Transport-Security "max-age=86400; includeSubDomains; preload" always;
 	}
 
 	server {
@@ -152,6 +156,8 @@ http {
 		if (!-d /home/$user/$repo.git/webroot/) {
 			return 502;
 		}
+
+		add_header Strict-Transport-Security "max-age=86400; includeSubDomains; preload" always;
 	}
 
 	server {
-- 
cgit v1.3.1-10-gc9f91