feat: Add option to enable hsts header (#6147)

* feat: Add option to enable hsts header
* Update golden files
This commit is contained in:
Steven Masley
2023-02-10 10:52:49 -06:00
committed by GitHub
parent 77afdf71dc
commit 6189035e98
13 changed files with 287 additions and 1 deletions
+17
View File
@@ -280,6 +280,23 @@ Flags:
"ed25519", "ecdsa", or "rsa4096".
Consumes $CODER_SSH_KEYGEN_ALGORITHM
(default "ed25519")
--strict-transport-security int Controls if the
'Strict-Transport-Security' header
is set on all static file responses.
This header should only be set if
the server is accessed via HTTPS.
This value is the MaxAge in seconds
of the header.
Consumes $CODER_STRICT_TRANSPORT_SECURITY
--strict-transport-security-options strings Two optional fields can be set in
the Strict-Transport-Security
header; 'includeSubDomains' and
'preload'. The
'strict-transport-security' flag
must be set to a non-zero value for
these options to be used.
Consumes
$CODER_STRICT_TRANSPORT_SECURITY_OPTIONS
--swagger-enable Expose the swagger endpoint via
/swagger.
Consumes $CODER_SWAGGER_ENABLE