Make HSTS behaviour configurable; Fixes #584

2017-10-13 01:09:04 +02:00
parent 53c2d0b5ca
commit 56411ca0e1
4 changed files with 26 additions and 5 deletions
--- a/lib/config/default.js
+++ b/lib/config/default.js
@@ -7,6 +7,12 @@ module.exports = {
  urladdport: false,
  alloworigin: ['localhost'],
  usessl: false,
+  hsts: {
+    enable: true,
+    maxAgeSeconds: 31536000,
+    includeSubdomains: true,
+    preload: true
+  },
  protocolusessl: false,
  usecdn: true,
  allowanonymous: true,