Thanks for that. But I'm not the one who added it. Any domain or subdomain that I add it appears by default
aaPanel forces HSTS on domains
I have realized that it's added when you request for SSL.
Any domains without an SSL don't have the security headers.
Please fix it and remove "preload" on HSTS
Which line need to added if using Litespeed?
x3inspire
Hello, add the following to the configuration file of the website and restart OLS: Please backup before modifying
context / {
allowBrowse 1
extraHeaders Strict-Transport-Security "max-age=31536000; includeSubDomains;preload"
rewrite {
}
addDefaultCharset off
phpIniOverride {
}
}
aaPanel_Kern Hello, whatever I do, it doesn't get disabled. I also removed the HSTS code. Do you suggest that the problem might be due to nginx 1.22?
I have Debian 11
aaPanel_Kern
Please tell me if it's not adjustable so I can stop doing the various settings because I'm confused
I saw that you asked someone before
Did you activate web speed? Yes, I activated it and then deleted web speed
Content-Type: text/html; charset=UTF-8
Connection: close
X-Redirect-By: WordPress
Location: https://domain.com/
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Cache: HIT From domain.com
Cache-Control: max-age=0
Nginx-Cache: HIT
Last-Modified: Monday, 15-Jan-2024 16:18:15 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Hello, you need to test this yourself. Do you use incognito mode to access? Do you want to restart nginx after modifying the configuration?
- Edited
aaPanel_Kern 1- no 2- yes
See, I removed it from this section, but it does not apply
add_header Strict-Transport-Security "max-age=63072000;";
- Edited
aaPanel_Kern
Hello, I thank God
My problem is solved
See, I deleted the site without deleting the database and root, I rebuilt the site, but I did not do this from the Wordpress deploy section, is there a problem?
2- Could I do the same thing I did using the Wordpress deploy method?
- Edited
@aaPanel_Kern
I also put it with the Wordpress deploy method, thank you
Put the possibility of deleting and editing in the aapanel forum so that when the problem is solved, we will delete the article so that it does not take up your time
shahinsafari
how your problem solved please guide
aaP_syedsabahathussain
Hello, what is your problem, please explain?
I think your ssl is not active
shahinsafari
SSL is Properly working
aaP_syedsabahathussain
Hello, sorry, I replied late, my server exploded
Your site may not be redirected correctly
or ssl is not activated correctly, re-enable the ssl certificate
aaP_syedsabahathussain I found a dear friend
- Edited
aaPanel_Kern
@aaP_syedsabahathussain
kern I found a dear friend HSTS off