diff --git a/roles/gitea/files/gitea.httpd.conf b/roles/gitea/files/gitea.httpd.conf
index f4d6b83..3af69c2 100644
--- a/roles/gitea/files/gitea.httpd.conf
+++ b/roles/gitea/files/gitea.httpd.conf
@@ -1,3 +1,12 @@
+# vim: set ft=apache :
+
+RewriteEngine On
+RewriteCond %{HTTPS} !on
+RewriteRule /.* https://%{SERVER_NAME}$0
+
+Header always set \
+	Strict-Transport-Security "max-age=63072000; includeSubDomains"
+
 ProxyPreserveHost On
 ProxyRequests Off
 ProxyPass / http://localhost:3000/