Strict-Transport-Security" HTTP header is not set

General Discussion
21

https://apps.nextcloud.com/apps/hsts

But that is meant to be used for e.g. shared hostings where you don’t have access to the webserver. Else setting it via webserver directly makes more sense.

22

Hello, I have exactly same situation and I want to remove that warning from my Nextcloud and now my lightpd service is failed.

root@DietPi:/etc/lighttpd/conf-enabled# systemctl status lighttpd.service
● lighttpd.service - Lighttpd Daemon
     Loaded: loaded (/lib/systemd/system/lighttpd.service; disabled; vendor preset: enabled)
     Active: failed (Result: exit-code) since Fri 2021-11-05 11:42:12 CET; 47s ago
    Process: 457049 ExecStartPre=/usr/sbin/lighttpd -tt -f /etc/lighttpd/lighttpd.conf (code=exited, status=255/EXCEPTION)
        CPU: 82ms

lis 05 11:42:12 DietPi systemd[1]: lighttpd.service: Scheduled restart job, restart counter is at 5.
lis 05 11:42:12 DietPi systemd[1]: Stopped Lighttpd Daemon.
lis 05 11:42:12 DietPi systemd[1]: lighttpd.service: Start request repeated too quickly.
lis 05 11:42:12 DietPi systemd[1]: lighttpd.service: Failed with result 'exit-code'.
lis 05 11:42:12 DietPi systemd[1]: Failed to start Lighttpd Daemon.

Regards.

23

you could run following to verify your configuration

/usr/sbin/lighttpd -tt -f /etc/lighttpd/lighttpd.conf
24

Now I remove that link and lighttpd is OK but:

root@DietPi:/# /usr/sbin/lighttpd -tt -f /etc/lighttpd/lighttpd.conf
root@DietPi:/#
25

there is no but. Only in case of an error you would see something. As there is no output, no issues detected.

26

There’re issues when I use:

cd /etc/lighttpd/conf-enabled
ln -s ../conf-available/98-dietpi-hsts.conf 98-dietpi-hsts.conf
service lighttpd force-reload
dietpi-services restart




root@DietPi:/etc/lighttpd/conf-enabled# /usr/sbin/lighttpd -tt -f /etc/lighttpd/lighttpd.conf
2021-11-05 12:06:04: configfile.c.1984) opening configfile /etc/lighttpd/conf-enabled/98-dietpi-hsts.conf failed: No such file or directory
2021-11-05 12:06:04: configfile.c.1970) source: /etc/lighttpd/lighttpd.conf line: 52 pos: 15 parser failed somehow near here: (EOL)
27

did you checked if /etc/lighttpd/conf-available/98-dietpi-hsts.conf is existing?

28

It not exist. Do I have to create?

29

reading the error message should have answered this question already. Yes of course you need to have the file available.

30

Did you use dietpi-letsencrypt? If so, run it again and enable HSTS there. It will then create the required config and enable it for Lighttpd.

31

Thanks. That works :slight_smile:
Regards

32

Okay great :slight_smile:.

33

What´s the solution with nginx?

Because I use nginx as webserver for my hosted Nextcloud.

Whats the solution for the “Strict-Transport-Security” HTTP header is not set message with this webserver” message there?

Thank you for your help

34

Same as above, use dietpi-letsencrypt to create the settings.