Apache config - HTTPS Strict-Transport-Security (HSTS)

Apache-config--HTTPS-Strict-Transport-Security

        # HSTS (HTTPS Strict-Transport-Security) for 1 Year including Sub Domains
        ##############################################################################
        #      web server declare that web browsers should only interact with it
        #      using secure HTTPS connections, and never via the insecure HTTP protocol
        ###############################################################################
        Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains;"


        # redirects the user to the page they were visiting over https
        ###############################################################################
        <IfModule mod_rewrite.c>
                RewriteEngine On
                RewriteCond %{HTTPS} off
                RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [QSA,L,R=301]
        </IfModule>