Add env vars for extra HSTS options

1 files changed, 12 insertions, 0 deletions

diff --git a/app.json b/app.json
index 07678ce3..1de6b7db 100644
--- a/app.json
+++ b/app.json
@@ -27,6 +27,18 @@
             "description": "whether to also use HSTS if HTTPS is enabled",
             "required": false
         },
+        "HMD_HSTS_MAX_AGE": {
+            "description": "max duration, in seconds, to tell clients to keep HSTS status",
+            "required": false
+        },
+        "HMD_HSTS_INCLUDE_SUBDOMAINS": {
+            "description": "whether to tell clients to also regard subdomains as HSTS hosts",
+            "required": false
+        },
+        "HMD_HSTS_PRELOAD": {
+            "description": "whether to allow at all adding of the site to HSTS preloads (e.g. in browsers)",
+            "required": false
+        },
         "HMD_DOMAIN": {
             "description": "domain name",
             "required": false