From 0c08f30f8fd822d7a71d68a9078fee4dccf44843 Mon Sep 17 00:00:00 2001
From: Anthony Wang <a@exozy.me>
Date: Fri, 12 Jan 2024 23:21:01 +0000
Subject: [PATCH] Enable HSTS for Nextcloud (it should be automatically enabled
 for all sites so idk why I have to do it manually for Nextcloud)

---
 nextcloud.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nextcloud.conf b/nextcloud.conf
index cbecb1f..bdd4003 100644
--- a/nextcloud.conf
+++ b/nextcloud.conf
@@ -29,7 +29,7 @@ server {
     # will add the domain to a hardcoded list that is shipped
     # in all major browsers and getting removed from this list
     # could take several months.
-    #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
+    add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
 
     # set max upload size and increase upload timeout:
     client_max_body_size 16G;