From 425089524373137e11d3691e7efdce0fb89281c8 Mon Sep 17 00:00:00 2001
From: redmatrix <git@macgirvin.com>
Date: Thu, 4 Feb 2016 20:38:22 -0800
Subject: make strict transport security header optional

---
 doc/hidden_configs.bb | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'doc')

diff --git a/doc/hidden_configs.bb b/doc/hidden_configs.bb
index 4418e45ea..af938b0a6 100644
--- a/doc/hidden_configs.bb
+++ b/doc/hidden_configs.bb
@@ -100,6 +100,8 @@ This document assumes you're an administrator.
     [b]system.paranoia[/b]
         As the pconfig, but on a site-wide basis.  Can be overwritten
         by member settings.
+	[b]system.transport_security_header[/b]
+		if non-zero and SSL is being used, include a strict-transport-security header on webpages
 	[b]system.poke_basic[/b]
 		Reduce the number of poke verbs to exactly 1 ("poke"). Disable other verbs. 
     [b]system.openssl_conf_file[/b]
-- 
cgit v1.2.3