feat: add HSTS

example/nuxt.config.js

@@ -10,9 +10,16 @@ module.exports = {
     resourceHints: false
   },
   modules: [
-    { handler: require('../') }
+    {
+      handler: require('../'),
+      options: {
+        hsts: {
+          maxAge: 15552000,
+          includeSubDomains: true,
+          preload: true
+        }
+      }
+    }
   ],
-  buildModules: [
-    '@nuxtjs/dotenv',
-  ]
+  buildModules: ['@nuxtjs/dotenv']
 }

example/pages/index.vue

@@ -5,7 +5,5 @@
 </template>
 
 <script>
-export default {
-
-}
+export default {}
 </script>

lib/module.js

@@ -1,16 +1,22 @@
-const { resolve } = require('path')
+const hsts = require('hsts')
 
-module.exports = async function (moduleOptions) {
+module.exports = function(moduleOptions) {
+  const defaults = {
+    hsts: null
+  }
   const options = {
+    ...defaults,
     ...this.options['nuxt-csp'],
     ...moduleOptions
   }
 
-  this.addPlugin({
-    src: resolve(__dirname, 'plugin.js'),
-    fileName: 'nuxt-csp.js',
-    options
-  })
+  const configureHsts = options => {
+    return hsts(options)
+  }
+
+  if (options.hsts) {
+    this.addServerMiddleware(configureHsts(options.hsts))
+  }
 }
 
 module.exports.meta = require('../package.json')

package.json

@@ -2,6 +2,12 @@
   "name": "@dansmaculotte/nuxt-csp",
   "version": "0.0.0",
   "description": "Module for Nuxt.js to configure CSP headers",
+  "keywords": [
+    "nuxt",
+    "nuxt-module",
+    "csp",
+    "content-security-policy"
+  ],
   "repository": "dansmaculotte/nuxt-csp",
   "license": "MIT",
   "contributors": [
@@ -19,7 +25,9 @@
     "release": "yarn test && standard-version && git push --follow-tags && npm publish",
     "test": "yarn lint && jest"
   },
-  "dependencies": {},
+  "dependencies": {
+    "hsts": "^2.2.0"
+  },
   "devDependencies": {
     "@babel/core": "latest",
     "@babel/preset-env": "latest",