Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
</syntaxhighlight>
BUT HSTS is deactivated for now because we don't have a valid SSL certificate
* Reverse Proxy (0.0.0.0:80/443 -> 127.0.0.1:9001) for [[Etherpad]] configured in /etc/apache2/sites-available/1_Etherpad