How to enable HSTS Strict-Transport-Security rule in .htacce

[charford2 Profile]

Please help me with this urgent issue.
A PCI scan on our web site has failed.
Reason: HSTS Missing From HTTPS Server

Can I add a rule in the .htaccess file like this:

Header always set Strict-Transport-Security "max-age-31536000; includeSubDomains; preload" env=HTTPS

[charford2 Profile]

I can't believe there have been NO replies since 24 Sep 2020
Maybe this Forum is now dead?

Anyway, for anyone interested the rule worked for me:

Header always set Strict-Transport-Security "max-age-31536000; includeSubDomains; preload" env=HTTPS