[...] Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains" [...]