From f37cffaf94dd0bed3f6f3b4fddd2ea53f54be1be Mon Sep 17 00:00:00 2001
From: j <repobase@j7b.net>
Date: Fri, 11 Jul 2025 00:31:13 +1000
Subject: [PATCH] hsts

---
 deployments/home-server/nextcloud.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/deployments/home-server/nextcloud.yaml b/deployments/home-server/nextcloud.yaml
index 77734a9..9e99229 100644
--- a/deployments/home-server/nextcloud.yaml
+++ b/deployments/home-server/nextcloud.yaml
@@ -110,6 +110,8 @@ metadata:
   namespace: home-server
   annotations:
     external-dns.alpha.kubernetes.io/hostname: nc.hxme.net
+    nginx.ingress.kubernetes.io/server-snippet: |
+      add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
 spec:
   tls:
     - hosts: