diff --git a/configuration.nix b/configuration.nix
index 44cb9f1..95d8a57 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -370,7 +370,10 @@ in {
           }
         '';
         extraConfig = ''
+          header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+
           header /_/* Cache-Control "public, max-age=31536000, immutable"
+
           root * /var/www/jakstys.lt
           file_server {
             precompressed br gzip