Optionally enable HSTS using env vars. Useful for testing

BudgetApp/Program.cs

@@ -82,6 +82,18 @@ builder.Services.AddScoped<AppState>();
 
 builder.Services.AddCascadingAuthenticationState();
 
+// HSTS
+if (bool.Parse(Environment.GetEnvironmentVariable("ENABLE_HSTS") ?? "false"))
+{
+    builder.Services.AddHsts(options =>
+    {
+        var hstsSection = builder.Configuration.GetSection("Hsts");
+        options.MaxAge = TimeSpan.FromDays(hstsSection.GetValue<int>("MaxAgeDays", 365));
+        options.IncludeSubDomains = hstsSection.GetValue<bool>("IncludeSubDomains", true);
+        options.Preload = hstsSection.GetValue<bool>("Preload", false);
+    });
+}
+
 // Add services to the container.
 builder.Services.AddRazorComponents()
     .AddInteractiveServerComponents();