From 560f46fa23069994e357b5ffc15028f87bf82f6a Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Tue, 4 Feb 2025 14:57:10 +0100
Subject: [PATCH] Add HSTS header and discovery config 15

---
 apps/templates/nextcloud-helm.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/apps/templates/nextcloud-helm.yaml b/apps/templates/nextcloud-helm.yaml
index 3597dcc..506725b 100644
--- a/apps/templates/nextcloud-helm.yaml
+++ b/apps/templates/nextcloud-helm.yaml
@@ -84,8 +84,9 @@ spec:
           className: nginx
           annotations:
             nginx.ingress.kubernetes.io/proxy-body-size: 100G
-            # nginx.ingress.kubernetes.io/configuration-snippet: |
-              # more_set_headers "Strict-Transport-Security: max-age=15768000; includeSubDomains";
+            nginx.ingress.kubernetes.io/configuration-snippet: |
+              more_set_headers "Strict-Transport-Security: max-age=15768001; includeSubDomains";
+              more_set_headers "strict-transport-security: max-age=15552002; includeSubDomains";
           #  kubernetes.io/tls-acme: "true"
             cert-manager.io/cluster-issuer: prod-cluster-issuer
             #  # Keep this in sync with the README.md: