nginx: remove Strict-Transport-Security

Strict-Transport-Security is only HTTPS
2021-10-25 12:19:32 -05:00
parent 37475fd3b8
commit d28adfa173
1 changed files with 0 additions and 2 deletions
--- a/gitolite-cgit/entrypoint.sh
+++ b/gitolite-cgit/entrypoint.sh
@@ -329,8 +329,6 @@ EOF
    error_log off;

    # Aditional Security Headers
-    # ref: https://developer.mozilla.org/en-US/docs/Security/HTTP_Strict_Transport_Security
-    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";

    # ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
    add_header X-Frame-Options DENY always;