diff --git a/build/proxy/nginx.conf b/build/proxy/nginx.conf
index 2299f24..3f71335 100644
--- a/build/proxy/nginx.conf
+++ b/build/proxy/nginx.conf
@@ -28,6 +28,7 @@ http {
 		root /www/data;
 		expires $expires;
 		add_header Content-Security-Policy $csp;
+		add_header Strict-Transport-Security 'max-age=604800; includeSubDomains';
 
 		location /api/ {
 			proxy_pass http://server;