Configuring the HSTS header
The Strict-Transport-Security (HSTS) header can be enabled and configured using the following System Properties
| Key | Default value | Description |
|---|---|---|
gocd.enable.hsts.header |
false | A boolean value indicating whether the HSTS header should be enabled |
gocd.hsts.header.max.age |
31536000 | The max-age value of the header. Defaults to one year |
gocd.hsts.header.include.subdomains |
false | Whether the include-subdomains flag should be set on the header |
gocd.hsts.header.preload |
false | Whether the preload flag should be set on the header |
Suggest edits to this page