From ca3e934cbafa311a908f68a864aba86a3bdbe99a Mon Sep 17 00:00:00 2001
From: Elvin Efendi <elvin.efendiyev@gmail.com>
Date: Thu, 12 Dec 2019 13:49:13 -0500
Subject: [PATCH] fix duplicate hsts bug

---
 rootfs/etc/nginx/lua/lua_ingress.lua | 2 ++
 rootfs/etc/nginx/template/nginx.tmpl | 1 +
 2 files changed, 3 insertions(+)

diff --git a/rootfs/etc/nginx/lua/lua_ingress.lua b/rootfs/etc/nginx/lua/lua_ingress.lua
index 463924792..f0b8e761c 100644
--- a/rootfs/etc/nginx/lua/lua_ingress.lua
+++ b/rootfs/etc/nginx/lua/lua_ingress.lua
@@ -142,7 +142,9 @@ function _M.rewrite(location_config)
 
     ngx_redirect(uri, config.http_redirect_code)
   end
+end
 
+function _M.header()
   if config.hsts and ngx.var.scheme == "https" and certificate_configured_for_current_request then
     local value = "max-age=" .. config.hsts_max_age
     if config.hsts_include_subdomains then
diff --git a/rootfs/etc/nginx/template/nginx.tmpl b/rootfs/etc/nginx/template/nginx.tmpl
index f0a1df16a..95f72b19a 100755
--- a/rootfs/etc/nginx/template/nginx.tmpl
+++ b/rootfs/etc/nginx/template/nginx.tmpl
@@ -991,6 +991,7 @@ stream {
             #}
 
             header_filter_by_lua_block {
+                lua_ingress.header()
                 plugins.run()
             }