Apache webserver

Make sure that the headers module is loaded: sudo a2enmod headers 

Add the following code to the apache2.conf file:

<IfModule mod_headers.c>
        Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
</IfModule>