Add HSTS setting to nginx configuration for gitlab

web-server/nginx/gitlab-omnibus-ssl-nginx.conf

@@ -62,6 +62,9 @@ server {
   ## See app/controllers/application_controller.rb for headers set
+  ## [Optional] Enable HTTP Strict Transport Security
+  # add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
+
   ## [Optional] If your certficate has OCSP, enable OCSP stapling to reduce the overhead and latency of running SSL.
   ## Replace with your ssl_trusted_certificate. For more info see:
   ## - https://medium.com/devops-programming/4445f4862461