Enable HTTP Strict Transport Security

Configuration

• (default is 1 year): duration to tell the client to keep the host in a list of known HSTS hosts
• (default is false): consents that the policy allows including the domain into web browser