add spdy and hsts for roundcube

cogini · Oct 22, 2014 · 0839244 · 0839244
1 parent c99d44c
commit 0839244
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/roundcube/templates/default/nginx-site.erb b/roundcube/templates/default/nginx-site.erb
@@ -1,13 +1,16 @@
 server {
 
-    listen               443 ssl;
+    listen               443 ssl spdy;
     server_name          <%= node[:roundcube][:server_names][0] %>;
     root                 <%= node[:roundcube][:site_dir] %>;
     client_max_body_size <%= node[:roundcube][:max_attachment_size] %>;
 
     access_log           <%= node[:roundcube][:log_dir] %>/access.log json;
     error_log            <%= node[:roundcube][:log_dir] %>/error.log;
 
+    # A year of HSTS
+    add_header Strict-Transport-Security "max-age=31536000";
+
     ssl_certificate      <%= node[:postfix][:smtpd_tls_cert_file] %>;
     ssl_certificate_key  <%= node[:postfix][:smtpd_tls_key_file] %>;