hsts

type Options struct {
	// MaxAge sets the duration (in hours) that the HSTS is valid for.
	MaxAge uint `json:"max_age" yaml:"max_age" mapstructure:"max_age"`

	// HostOverride provides a host to the redirection URL in the case that
	// the system is behind a load balancer which doesn't provide the
	// X-Forwarded-Host HTTP header (e.g. an Amazon ELB).
	HostOverride string `json:"host_override" yaml:"host_override" mapstructure:"host_override"`

	// Decides whether to accept the X-Forwarded-Proto header as proof of SSL.
	AcceptXForwardedProtoHeader bool `json:"accept_forwarded_proto" yaml:"accept_forwarded_proto" mapstructure:"accept_forwarded_proto"`

	// SendPreloadDirective sets whether the preload directive should be set.
	// The directive allows browsers to confirm that the site should be added
	// to a preload list. https://hstspreload.org/
	SendPreloadDirective bool `json:"send_preload_directive" yaml:"send_preload_directive" mapstructure:"send_preload_directive"`

	// Whether to apply the HSTS policy to subdomains as well.
	IncludeSubdomains bool `json:"include_subdomains" yaml:"include_subdomains" mapstructure:"include_subdomains"`
}