/ mozilla ssl cfg generator

https://ssl-config.mozilla.org/#server=nginx&version=1.27.3&config=intermediate&openssl=3.4.0&guideline=5.7

cfg/ngx/hw.op.fo.conf

@@ -26,11 +26,14 @@ server {
 server {
     listen 443 ssl http2;
     listen [::]:443 ssl http2;
+    http2 on;
 
     ssl_certificate /etc/nginx/acme.sh/op.fo/fullchain.pem;
     ssl_certificate_key /etc/nginx/acme.sh/op.fo/key.pem;
     ssl_trusted_certificate /etc/nginx/acme.sh/op.fo/cert.pem;
 
+    add_header Strict-Transport-Security "max-age=63072000" always;
+
     root /var/www/hw.op.fo;
     index index.html;
     server_name hw.op.fo;