#hsts

Security headers and HSTS preload as code, for a site on GitHub Pages

GitHub Pages can't set response headers. How this site gets them from a Cloudflare rule and preload-ready HSTS, both kept in the repo and checked after every apply.

#security#cloudflare#github-actions#hsts7 min read