Second phase of HSTS header settings (supabase#33857)

apply second phase of hsts header settings

Author: doublethink

apps/docs/next.config.mjs

@@ -74,7 +74,7 @@ const nextConfig = {
  headers: [
  {
  key: 'Strict-Transport-Security',
- value: process.env.VERCEL === '1' ? 'max-age=31536000' : '',
+ value: process.env.VERCEL === '1' ? 'max-age=1200; includeSubDomains' : '',
  },
  {
  key: 'X-Robots-Tag',
@@ -97,7 +97,7 @@ const nextConfig = {
  headers: [
  {
  key: 'Strict-Transport-Security',
- value: process.env.VERCEL === '1' ? 'max-age=31536000' : '',
+ value: process.env.VERCEL === '1' ? 'max-age=1200; includeSubDomains' : '',
  },
  {
  key: 'X-Robots-Tag',

apps/studio/next.config.js

@@ -494,7 +494,7 @@ const nextConfig = {
  key: 'Strict-Transport-Security',
  value:
  process.env.NEXT_PUBLIC_IS_PLATFORM === 'true' && process.env.VERCEL === '1'
- ? 'max-age=31536000'
+ ? 'max-age=1200; includeSubDomains'
  : '',
  },
  {

apps/www/next.config.mjs

@@ -84,7 +84,7 @@ const nextConfig = {
  source: "/(.*)",
  headers: [{ 
  key: 'Strict-Transport-Security', 
- value: process.env.NEXT_PUBLIC_IS_PLATFORM === 'true' && process.env.VERCEL === '1' ? 'max-age=31536000' : '' }],
+ value: process.env.NEXT_PUBLIC_IS_PLATFORM === 'true' && process.env.VERCEL === '1' ? 'max-age=1200; includeSubDomains' : '' }],
  },
  ]
  },