Add 'always' parameter ensures that the header is set for all responses

RahulMahale · RahulMahale · commit 0483b293de1b · 2018-07-24T13:12:03.000+05:30
diff --git a/config/nginx.conf b/config/nginx.conf
@@ -32,7 +32,7 @@ server {
     ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
     include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;"; # config to enable HSTS
+    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS
 
 }
 
@@ -70,7 +70,7 @@ server {
     ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
     include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
+    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS
 }
 
 #
@@ -90,7 +90,7 @@ server {
     ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
     include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;"; # config to enable HSTS
+    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS
 
 }
 
@@ -112,7 +112,7 @@ server {
     ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
     include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;"; # config to enable HSTS
+    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS
 
 }
 

Original file line number	Diff line number	Diff line change
`@@ -32,7 +32,7 @@ server {`
`32`	`32`	`ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot`
`33`	`33`	`include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot`
`34`	`34`	`ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot`
`35`		`- add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;"; # config to enable HSTS`
	`35`	`+ add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS`
`36`	`36`
`37`	`37`	`}`
`38`	`38`
`@@ -70,7 +70,7 @@ server {`
`70`	`70`	`ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot`
`71`	`71`	`include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot`
`72`	`72`	`ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot`
`73`		`-`
	`73`	`+ add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS`
`74`	`74`	`}`
`75`	`75`
`76`	`76`	`#`
`@@ -90,7 +90,7 @@ server {`
`90`	`90`	`ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot`
`91`	`91`	`include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot`
`92`	`92`	`ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot`
`93`		`- add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;"; # config to enable HSTS`
	`93`	`+ add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS`
`94`	`94`
`95`	`95`	`}`
`96`	`96`
`@@ -112,7 +112,7 @@ server {`
`112`	`112`	`ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot`
`113`	`113`	`include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot`
`114`	`114`	`ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot`
`115`		`- add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;"; # config to enable HSTS`
	`115`	`+ add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS`
`116`	`116`
`117`	`117`	`}`
`118`	`118`