add_header Strict-Transport-Security max-age=15768000 always;