Enable STS only for main domain name, not for all subdomains

Author: Lupul

install/deb/nginx/nginx.conf

@@ -116,7 +116,7 @@ http {
     ssl_stapling_verify on;
     resolver 1.0.0.1 1.1.1.1 valid=300s;
     resolver_timeout    5s;
-    add_header          Strict-Transport-Security "max-age=31536000; includeSubDomains";
+    add_header          Strict-Transport-Security "max-age=31536000";
     add_header          X-Frame-Options SAMEORIGIN;
     add_header          X-Content-Type-Options nosniff;
 

src/deb/nginx/nginx.conf

@@ -108,7 +108,7 @@ http {
 
         location /error/ {
             expires off;
-            internal
+            internal;
         }
 
         location /rrd/ {