Hi all, for our current self hosted Discourse instances, we need to add “IncludeSubDomains” to our STS headers due to this being an expectation of our internal scanners. Previously I achieved this by using some sed commands in app.yml in custom commands after build to update /etc/nginx/conf.d/dis…

[תמונה] supermathie: The easiest option is probably editing templates/web.ssl.template.yml with the new values you want. I would do that first since it’s easiest. Once you figure it out, the next easiest thing is to copy that file somewhere else so that you don’t have issues with git conflict…

Supported way of adding "IncludeSubdomain" to STS headers

מפתח

supermathie (Michael Brown) 9 בינואר,‏ 2026,‏ 10:23pm 2

Does using set_header instead of add_header solve the problem?

לייק 1

נושא		תגובות	צפיות
Help adding includeSubDomains to the Strict-Transport-Security header Hosting	5	125	22 בספטמבר,‏ 2025
Set Strict-Transport-Security header Installation	3	605	10 באוקטובר,‏ 2022
Add a custom HTTP header to requests made to your Discourse Sysadmins how-to	5	4758	12 בספטמבר,‏ 2016
HSTS header not set with www and non www setup Support nginx	2	746	6 באוקטובר,‏ 2022
Let’s Encrypt problem after upgrading to 1.9.0.beta3 Bug	14	1670	14 ביולי,‏ 2017

Supported way of adding "IncludeSubdomain" to STS headers

נושאים קשורים