Symbiosis: I want SSL only without HSTS
Imported from https://www.github.com/BytemarkHosting/symbiosis/issues/66
I want a back-out path from ssl-only. Currently, if I deploy SSL only HSTS headers get issued, which mean I have no way to back out if I have problems with certificate renewal or spot a problem with the way the SSL site renders
So, maybe I could make a file config/ssl-only-no-sts
to get ssl throughout the site, and when I'm confident that I can commit to this configuration, then deploy STS.