Push a temporary HSTS hack because for netlify broken root-level domains

Signed-off-by: Ari Archer <ari.web.xyz@gmail.com>
This commit is contained in:
Ari Archer 2022-09-25 05:04:58 +03:00
parent 66a9d4b400
commit f8e98feabc

View file

@ -192,3 +192,10 @@
X-Permitted-Cross-Domain-Policies = "none"
Referrer-Policy = "no-referrer"
[[headers]]
for = "https://ari-web.xyz"
[headers.values]
Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
Content-Security-Policy = "upgrade-insecure-requests"
Referrer-Policy = "no-referrer"