Make HSTS behaviour configurable; Fixes #584

2017-10-13 01:09:04 +02:00
parent 53c2d0b5ca
commit 56411ca0e1
4 changed files with 26 additions and 5 deletions
--- a/config.json.example
+++ b/config.json.example
@@ -6,6 +6,9 @@
        }
    },
    "development": {
+        "hsts": {
+            "enable": false
+        },
        "db": {
            "dialect": "sqlite",
            "storage": "./db.hackmd.sqlite"
@@ -13,6 +16,12 @@
    },
    "production": {
        "domain": "localhost",
+        "hsts": {
+            "enable": "true",
+            "maxAgeSeconds": "31536000",
+            "includeSubdomains": "true",
+            "preload": "true"
+        },
        "db": {
            "username": "",
            "password": "",