On my server, I usually set custom Headers in apache. A typical application is to set HTTP Strict Transport Security. It would be good for security reason to be able to add such headers. This could in a file given as parameter to SUBSONIC_ARGS, e.g.
- Code: Select all
SUBSONIC_ARGS="--max-memory=250 --https-port=443 --custom-headers=/var/subsonic/headers"
and
- Code: Select all
cat /var/subsonic/headers
Header set Strict-Transport-Security "max-age=15552000"
Thank you.