add_header Strict-Transport-Security max-age=31536000; # 1yr