“Strict-Transport-Security” HTTP header is not configured to at least “15552000” seconds

[PowerQuest]

So how do you actually enable this?
I suppose it should be done in .htaccess, right?
But the documentation doesn’t tell much on how you ACTUALY do it:

Hardening and Security Guidance

Anyone here that kindly would enlighten me on how you do apply it correctly, please?

Thanks in advance!

[alfredb]

I’ve added it in the file /etc/apache2/sites-enabled/000-default.conf.

<IfModule mod_headers.c>
  Header always set Strict-Transport-Security "max-age=15552000"
</IfModule>

[rkaussow]

@alfredb

I’ve added it in the file /etc/apache2/sites-enabled/000-default.conf.

That should be the preferred way whenever possible, as it avoids issues on ownCloud updates and with the integrity check.

[PowerQuest]

Thank you for the help!
Kind regards