fix: set HSTS preload attribute to false by default

See <https://hstspreload.org/#opt-in> for more information
why this is important.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
This commit is contained in:
Erik Michelson 2025-02-01 22:50:23 +01:00
parent 71854a882f
commit 72c233b233
3 changed files with 11 additions and 6 deletions

View file

@ -15,7 +15,7 @@ module.exports = {
enable: true,
maxAgeSeconds: 60 * 60 * 24 * 365,
includeSubdomains: true,
preload: true
preload: false
},
csp: {
enable: true,