Changeset 897c33b in Klonkt


Ignore:
Timestamp:
06/28/2026 03:49:07 PM (2 months ago)
Author:
Robin Genis <roboburr@…>
Branches:
main
Children:
1ff0043
Parents:
81bb9c5
Message:

docs(readme): document the HSTS_STRICT env var

File:
1 edited

Legend:

Unmodified
Added
Removed

  • README.md

    r81bb9c5 r897c33b  
    162162| `KLONKT_DEFAULT_LANG` | — | Default language for visitors (`en`/`nl`/`de`) |
    163163| `KLONKT_AUDIO` | — | `off` = lite mode (no audio/ffmpeg) |
     164| `HSTS_STRICT` | — | `1` = stricter HTTPS header (`includeSubDomains` + `preload`). Only set this if Klonkt owns the **whole** domain and all its subdomains are HTTPS — it forces every subdomain to HTTPS and can bake your domain into browsers near-permanently. Leave unset otherwise; the default is already safe. |
    164165
    165166## Stack
Note: See TracChangeset for help on using the changeset viewer.