https://github.com/cellane/dokku-hsts
Dokku HSTS Plugin is a simple plugin that gives the ability to enable HSTS on a per-app basis.
https://github.com/cellane/dokku-hsts
dokku hsts strict-transport-security
Last synced: 5 months ago
JSON representation
Dokku HSTS Plugin is a simple plugin that gives the ability to enable HSTS on a per-app basis.
- Host: GitHub
- URL: https://github.com/cellane/dokku-hsts
- Owner: Cellane
- Created: 2019-10-11T01:33:44.000Z (almost 6 years ago)
- Default Branch: master
- Last Pushed: 2019-10-11T02:37:04.000Z (almost 6 years ago)
- Last Synced: 2025-04-23T22:52:15.141Z (5 months ago)
- Topics: dokku, hsts, strict-transport-security
- Language: Shell
- Homepage:
- Size: 3.91 KB
- Stars: 6
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Dokku HSTS Plugin
Dokku HSTS Plugin is a simple plugin that gives the ability to enable HSTS on a
per-app basis.
## Installation
```shell
# on 0.4.x+
sudo dokku plugin:install https://github.com/Cellane/dokku-hsts.git
```
## Usage
```shell
# To enable HSTS for application, set the `HSTS_ENABLED` environmental variable
# to `true`.
#
# By default, this will enable HSTS for the particular application only (in
# other words, the `includeSubdomains` clause is ommitted).
#
# By default, the max-age clause is set to 31536000 seconds, which is a period
# of one year.
dokku config:set HSTS_ENABLED=true
# If you wish to customize the max-age value, then this is what you’re looking
# for.
dokku config:set HSTS_MAX_AGE=15768000
# If you wish to include the `includeSubdomains` clause (this could be
# useful for applications deployed to apex domain), set this to `true`.
# Bear in mind, however, that this will NOT automatically add the HSTS header
# to other applications deployed to Dokku.
dokku config:set HSTS_INCLUDE_SUBDOMAINS=true
```