diff --git a/roles/baseline/defaults/main.yml b/roles/baseline/defaults/main.yml
index 95835220..a16cde79 100644
--- a/roles/baseline/defaults/main.yml
+++ b/roles/baseline/defaults/main.yml
@@ -54,6 +54,7 @@ INGRESS_NGINX_CONFIG:
 
     config:
       use-forwarded-headers: "true"
+      hsts-max-age: "63072000"
     tcp: {}
     udp: {}
     lifecycle: