Update _hsts.conf template to increase HSTS max-age value

[phantomski77]

I propose the change of max-age value of HSTS from 1 year to 2 years in accordance with Mozilla recommended configurations for Security/Server side TLS.

• Recommended by Mozilla and security whitepapers
• Server side setting not affecting clients
• Security hardening principle
• 1 year fails most SSL checks
  If variable value is necessary, I'd suggest an extra option in Proxy Host/SSL section in WebGUI.

Thank you and keep up the great work.

[jc21]

Docker Image for build 2 is available on DockerHub as jc21/nginx-proxy-manager:github-pr-947

[phantomski77]

Pulled, tested, all correct. Container /app/templates/_hsts.conf modified and used correctly by certbot. Resulting SSL protocol details using correct new HSTS value.

Thanks @jc21, much appreciated.

[jc21]

Docker Image for build 3 is available on DockerHub as jc21/nginx-proxy-manager:github-pr-947