Hi all, for our current self hosted Discourse instances, we need to add “IncludeSubDomains” to our STS headers due to this being an expectation of our internal scanners. Previously I achieved this by using some sed commands in app.yml in custom commands after build to update /etc/nginx/conf.d/dis…

[画像] supermathie: The easiest option is probably editing templates/web.ssl.template.yml with the new values you want. I would do that first since it’s easiest. Once you figure it out, the next easiest thing is to copy that file somewhere else so that you don’t have issues with git conflicting…

[画像] tanya_byrne: add_header Does using set_header instead of add_header solve the problem?

I’ll give this a go and report back :slight_smile:

If I use set_header I get an SSL error on rebuild, with the cert not being recognized and “connection refused” message when attempting to load the forum page. Some further information, we use our own SSL cert.

[画像] tanya_byrne: the cert not being recognized and “connection refused” message These two errors are mutually exclusive… Sorry, nginx doesn’t have set_header - I misremembered and it’s from another tool. The easiest option is probably editing templates/web.ssl.template.yml with the new val…

STSヘッダーに「IncludeSubdomain」を追加するサポートされている方法

開発

tanya_byrne (kukulaka) 2026 年 1 月 11 日午前 12:07 7

お二人とも、ご協力ありがとうございます！

トピック		返信	表示
Help adding includeSubDomains to the Strict-Transport-Security header Self-hosting hosting	5	167	2025 年 10 月 22 日
Set Strict-Transport-Security header Self-hosting	3	619	2022 年 10 月 10 日
Add a custom HTTP header to requests made to your Discourse Sysadmins how-to	5	4784	2016 年 9 月 12 日
HSTS header not set with www and non www setup Support nginx	2	763	2022 年 10 月 6 日
Let’s Encrypt problem after upgrading to 1.9.0.beta3 Bug	14	1714	2017 年 7 月 14 日

STSヘッダーに「IncludeSubdomain」を追加するサポートされている方法

関連トピック