nixpkgs-suyu/nixos/modules
Daniel KT 4590a2380e nixos/nextcloud: add Strict-Transport-Security
This commit adds a Strict-Transport-Security header to
the nginx config file generated by the nextcloud module.

The Strict-Transport-Security header is recommended in
official guide for hardening Nextcloud installations:
https://docs.nextcloud.com/server/16/admin_manual/installation/harden_server.html

Further, if it is not set, we see a warning in the security scan results
in the Nextcloud admin panel:

```
The "Strict-Transport-Security" HTTP header is not set to at least "15552000" seconds. For enhanced security, it is recommended to enable HSTS as described in the security tips

```
2019-09-25 16:56:53 -04:00
..
config nixos/xdg/icons: match XCURSOR_PATH spec 2019-09-18 13:03:14 -04:00
hardware hardware.brightnessctl: add brightnessctl to env 2019-09-18 00:06:11 +02:00
i18n/input-method Revert "nixos/doc: re-format" 2019-09-19 19:17:30 +02:00
installer Merge pull request #67232 from ck3d/container-useHostResolvConf 2019-09-25 09:34:17 +00:00
misc Merge staging-next into staging 2019-08-31 10:04:20 +02:00
profiles qemu-guest: allow to override security.rngd 2019-09-18 00:35:04 +09:00
programs Merge pull request #68946 from volth/escape 2019-09-24 04:19:12 +01:00
security Merge pull request #67748 from typetetris/yubico-local-auth 2019-09-24 03:31:39 +01:00
services nixos/nextcloud: add Strict-Transport-Security 2019-09-25 16:56:53 -04:00
system Merge pull request #67232 from ck3d/container-useHostResolvConf 2019-09-25 09:34:17 +00:00
tasks nixos/network: replace deprecated DHCP=both by DHCP=yes 2019-09-24 11:33:36 +02:00
testing
virtualisation Merge pull request #67232 from ck3d/container-useHostResolvConf 2019-09-25 09:34:17 +00:00
module-list.nix fancontrol service init 2019-09-25 05:05:32 +02:00
rename.nix nixos/pymks: log to journal 2019-09-25 06:33:34 +08:00