include options-http-headers.conf;
add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload';