[GitHub] [apisix-ingress-controller] tao12345666333 commented on issue #1908: help request: How to enable HSTS in Helm chart

["tao12345666333 (via GitHub)" <gi...@apache.org>]

tao12345666333 commented on issue #1908:
URL: https://github.com/apache/apisix-ingress-controller/issues/1908#issuecomment-1655049339

   Apache APISIX is built on NGINX. In fact, if you want to enable HSTS, you need to add the following directive.
   
   ```
   add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
   ```
   
   For APISIX, you can modify the response header through plugins or add NGINX configuration.
   
   ref: Apache APISIX is built on NGINX. In fact, if you want to enable HSTS, you just need to add the following directive.
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org