Support HSTS on GitLab Pages on per domain basis (also on gitlab.com)

Problem to Solve

Some users want to enforce no access to their web content without HTTPS/certificates.

This can be done with HTTP Strict Transport Security (HSTS) policy, but we do not currently support enabling this for GitLab Pages sites on GitLab.com.

Solution

Allow users to enable HSTS for Pages on GitLab.com.