HSTS Header source file?

djav1985 · December 2, 2020, 12:19am

Where is the file located in a setup Ubuntu servers directory structure for the file used to create the HTST header file when you select add HTST header? I would like to make a change to it so it will survive rebuilding. I do know a Hestia update will require changing it again but that is less often.

I’ve looked and looked but I just can’t find it. Thank you.

Raphael · December 2, 2020, 8:00am

Hi @djav1985

Basicly this will be included from the following line:

github.com

hestiacp/hestiacp/blob/a23603548436e49bda149ab9157518124de544f3/install/deb/templates/web/nginx/default.stpl#L15


server {
    listen      %ip%:%proxy_ssl_port% ssl http2;
    server_name %domain_idn% %alias_idn%;
    ssl_certificate      %ssl_pem%;
    ssl_certificate_key  %ssl_key%;
    ssl_stapling on;
    ssl_stapling_verify on;
    error_log  /var/log/%web_system%/domains/%domain%.error.log error;
    include %home%/%user%/conf/web/%domain%/nginx.hsts.conf*;
    location / {
        proxy_pass      https://%ip%:%web_ssl_port%;
        location ~* ^.+\.(%proxy_extentions%)$ {
            root           %sdocroot%;
            access_log     /var/log/%web_system%/domains/%domain%.log combined;
            access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
            expires        max;
            try_files      $uri @fallback;
        }

So this is the file you search: /home/user/conf/web/domain.tld/nginx.hsts.conf

But maybe you could do also something like /home/user/conf/web/domain.tld/nginx.hsts.conf_custom, basicly it should be included aswell, but probaly needs some testing (hsts flag needs to be turned off).