_hsts.conf/README.md

Security Headers for NGINX Proxy Manager

Issue: https://github.com/jc21/nginx-proxy-manager/issues/582

Due to a bug it's impossible to add securityheaders to NGINX Proxy Manager. Use this workaround to fix this issue:

1. download _hsts.conf

wget https://git.hibbit.net/rogier/_hsts.conf/raw/commit/67ed7f3bcdec6e3547923c899aafc693532750f0/_hsts.conf -P /apps/proxy

2. Create a volume to this file (read-only)

Docker Compose

volumes:

    - /apps/proxy/_hsts.conf:/app/templates/_hsts.conf:ro

3. Go to NGINX Proxy Manager, click Edit and go to the tab SSL. Enable and/or re-enable Force SSL, HSTS Enabled and HSTS Subdomains.

   Done!

Note: If you have enabled an Access List not all headers will load. This is not a bug!

Result @ https://securityheaders.com: