From bbdcfed5e392a8c3260ac2b6c5ecc24158cfd7d4 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Tue, 4 Feb 2025 14:21:50 +0100
Subject: [PATCH] Add HSTS header and discovery config 6

---
 apps/templates/nextcloud-helm.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/apps/templates/nextcloud-helm.yaml b/apps/templates/nextcloud-helm.yaml
index 4ad9e75..55483f7 100644
--- a/apps/templates/nextcloud-helm.yaml
+++ b/apps/templates/nextcloud-helm.yaml
@@ -50,6 +50,8 @@ spec:
           className: nginx
           annotations:
             nginx.ingress.kubernetes.io/proxy-body-size: 100G
+            nginx.ingress.kubernetes.io/configuration-snippet: |
+              more_set_headers "Strict-Transport-Security: max-age=15552000; includeSubDomains";
           #  kubernetes.io/tls-acme: "true"
             cert-manager.io/cluster-issuer: prod-cluster-issuer
           #  # Keep this in sync with the README.md: