From 905c2e5deb925e42e7a7c2aa9397c7f81684e77a Mon Sep 17 00:00:00 2001
From: Jonah <jonah@triplebit.net>
Date: Sun, 1 Dec 2019 00:50:04 -0600
Subject: [PATCH] Enforce Certificate Transparency

---
 nginx/010-headers.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nginx/010-headers.conf b/nginx/010-headers.conf
index 12f9c347..95424841 100644
--- a/nginx/010-headers.conf
+++ b/nginx/010-headers.conf
@@ -5,5 +5,5 @@ add_header Content-Security-Policy "default-src 'none'; script-src 'self' https:
 add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload";
 add_header 'Access-Control-Allow-Origin' '*';
 add_header Alt-Svc 'h2="privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion:443"; ma=86400; persist=1';
-add_header Expect-CT 'max-age=0';
+add_header Expect-CT 'max-age=86400, enforce';
 add_header Referrer-Policy "strict-origin";