From 306bbfc1012f2fc0339d6b0bdc1fd094503cd1cf Mon Sep 17 00:00:00 2001 From: Peter Thomassen Date: Thu, 27 Aug 2026 17:22:25 +0200 Subject: [PATCH] fix(www): correctly advertise HTTP/3 4c2f23b8ccb745e055630b4be4f76d4133d5f14d had it in the wrong place. --- www/conf/sites-available/90-desec.static.location | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/www/conf/sites-available/90-desec.static.location b/www/conf/sites-available/90-desec.static.location index 625769a12..d2e3ecedc 100644 --- a/www/conf/sites-available/90-desec.static.location +++ b/www/conf/sites-available/90-desec.static.location @@ -5,14 +5,12 @@ location / { root /usr/share/nginx/html/; error_page 403 =503 /503.html; - # advertise HTTP/3 - add_header Alt-Svc 'h3=":443"; ma=86400' always; - gzip on; gzip_types *; location /index.html { expires epoch; + add_header Alt-Svc 'h3=":443"; ma=86400' always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; # CSP hashes are for legacy browser support. # Source: https://github.com/vitejs/vite/tree/v5.0.10/packages/plugin-legacy#content-security-policy