Add more information about HSTS

web-server/nginx/gitlab-omnibus-ssl-nginx.conf

@@ -63,6 +63,8 @@ server {
   ## See app/controllers/application_controller.rb for headers set
   ## [Optional] Enable HTTP Strict Transport Security
+  ## HSTS is a feature improving protection against MITM attacks
+  ## For more information see: https://www.nginx.com/blog/http-strict-transport-security-hsts-and-nginx/
   # add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
   ## [Optional] If your certficate has OCSP, enable OCSP stapling to reduce the overhead and latency of running SSL.