moderator
Solution
Hey!
You can update your nginx configuration like described in this Laracasts episode: https://laracasts.com/series/learn-laravel-forge/episodes/22
With the config open, add this line to the server block for your canonical domain:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
so it will look something like this:
server {
listen 443 ssl;
...
server_name <your-canonical-domain>;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
...
}
You can change the max-age value to your preferred value.
0
Solution selected by
@driesvints
Hey! Thanks!
But that also forces the WWW to be secure, yes? We do not want that. Does that make sense?
0
moderator
Ah, yeah. You can remove the includeSubDomains and only leave the max-age like this:
add_header Strict-Transport-Security "max-age=31536000" always;
The mozilla docs show this as valid option.
Last updated
1 year ago.
0
Sign in to participate in this thread!
Moderators
-
driesvints
Joined 16 Dec 2013
-
joedixon
Joined 23 Jun 2014
-
tvbeek
Joined 8 Jan 2018
-
tomhatzer
Joined 28 Oct 2021
Laravel
Laravel News
Laracasts
Laravel Podcast