in internal/httphandler/httphandler.go [96:98]
func addHTSTHeader(w http.ResponseWriter) { w.Header().Add("Strict-Transport-Security", "max-age=3600; includeSubdomains; preload") }