diff --git a/templates/graphite.ssl.vhost.erb b/templates/graphite.ssl.vhost.erb
index 1fb5592..d2b6bba 100644
--- a/templates/graphite.ssl.vhost.erb
+++ b/templates/graphite.ssl.vhost.erb
@@ -8,6 +8,7 @@
 </VirtualHost>
 
 <VirtualHost *:443>
+        Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
         SSLEngine on
         SSLCertificateFile      <%= scope.lookupvar("graphite::ssl_cert_file") %>
         SSLCertificateKeyFile   <%= scope.lookupvar("graphite::ssl_key_file") %>