From 56411ca0e10a90d8206508171e3871146bce5351 Mon Sep 17 00:00:00 2001
From: Literallie
Date: Fri, 13 Oct 2017 01:09:04 +0200
Subject: Make HSTS behaviour configurable; Fixes #584

---
 config.json.example | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'config.json.example')

diff --git a/config.json.example b/config.json.example
index 87c04ed0..e2d774c7 100644
--- a/config.json.example
+++ b/config.json.example
@@ -6,6 +6,9 @@
         }
     },
     "development": {
+        "hsts": {
+            "enable": false
+        },
         "db": {
             "dialect": "sqlite",
             "storage": "./db.hackmd.sqlite"
@@ -13,6 +16,12 @@
     },
     "production": {
         "domain": "localhost",
+        "hsts": {
+            "enable": "true",
+            "maxAgeSeconds": "31536000",
+            "includeSubdomains": "true",
+            "preload": "true"
+        },
         "db": {
             "username": "",
             "password": "",
-- 
cgit v1.2.3