• 0 Posts
  • 12 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle










  • Can you please make http://shota.nu redirect to https? enabling hsts would also be nice.

    First experience I had was typing it out from memory, seeing the blank nginx page, and looking up the announcement post thinking I had misremembered.

    example nginx config
    server {
        listen 80;
        #server_name shota.nu;
        
        return 301 https://$server_name$request_uri;
    }
    
    server {
        #listen 443 ssl;
        #server_name shota.nu;
        
        # max-age of 15768000 and over will get hsts permanently compiled into some static lists!
        # If you're unsure about maybe disabling it later, reduce it to say 7884000
        add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
    }
    


    Also you may wanna add server_tokens off; to your html{} block if you don’t want to show off your 3 year old nginx that has been deprecated since 2021.