…
# add_header Strict-Transport-Security "max-age=15768000; includeSubDomains";
…