Hello, I feel sure this has been answered before but I haven't been able to find it. A nextcloud instance on my ISPCONFIG server is requiring hsts to be set and I'm unclear exactly how to do this in ISPCONFIG. Also is the mod-headers extension installed or do I have to install it? I welcome any advice.
Are you using Apache2? If so, you can add a .htaccess file or add it to the Apache directives for your site under the web settings -> Options: Code: <IfModule mod_headers.c> Header always set Strict-Transport-Security "max-age=31536000" </IfModule>
I used Internet Search Entgines with Code: hsts ispconfig to find among others this: https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4105 That helped me find this discussion: https://www.howtoforge.com/community/threads/effort-to-setup-hsts.84371/
Thank you Taleman for the search engine tip. In my doziness (its late at night here) I was trying to search HowtoForge directly