From 2299bac78c6afe0285c15a2e7b5cdbc61e23c46e Mon Sep 17 00:00:00 2001
From: Gene Liverman <gene@technicalissues.us>
Date: Wed, 28 Aug 2024 11:27:44 -0400
Subject: [PATCH] Fix hsts syntax

---
 modules/hosts/nixos/hetznix01/post-install/nginx.nix  | 2 +-
 modules/hosts/nixos/nixnuc/containers/nginx-proxy.nix | 2 +-
 modules/hosts/nixos/nixnuc/default.nix                | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/hosts/nixos/hetznix01/post-install/nginx.nix b/modules/hosts/nixos/hetznix01/post-install/nginx.nix
index 7721cf6..1b1d299 100644
--- a/modules/hosts/nixos/hetznix01/post-install/nginx.nix
+++ b/modules/hosts/nixos/hetznix01/post-install/nginx.nix
@@ -14,7 +14,7 @@ in {
       # Add HSTS header with preloading to HTTPS requests.
       # Adding this header to HTTP requests is discouraged
       map $scheme $hsts_header {
-          https   "max-age=31536000 always;";
+          https   "max-age=31536000;";
       }
       add_header Strict-Transport-Security $hsts_header;
     '';
diff --git a/modules/hosts/nixos/nixnuc/containers/nginx-proxy.nix b/modules/hosts/nixos/nixnuc/containers/nginx-proxy.nix
index d372685..0a78727 100644
--- a/modules/hosts/nixos/nixnuc/containers/nginx-proxy.nix
+++ b/modules/hosts/nixos/nixnuc/containers/nginx-proxy.nix
@@ -67,7 +67,7 @@ in {
           # Add HSTS header with preloading to HTTPS requests.
           # Adding this header to HTTP requests is discouraged
           map $scheme $hsts_header {
-              https   "max-age=31536000 always;";
+              https   "max-age=31536000;";
           }
           add_header Strict-Transport-Security $hsts_header;
         '';
diff --git a/modules/hosts/nixos/nixnuc/default.nix b/modules/hosts/nixos/nixnuc/default.nix
index a72add9..5725664 100644
--- a/modules/hosts/nixos/nixnuc/default.nix
+++ b/modules/hosts/nixos/nixnuc/default.nix
@@ -213,7 +213,7 @@ in {
         # Add HSTS header with preloading to HTTPS requests.
         # Adding this header to HTTP requests is discouraged
         map $scheme $hsts_header {
-            https   "max-age=31536000 always;";
+            https   "max-age=31536000;";
         }
         add_header Strict-Transport-Security $hsts_header;
       '';