diff --git a/argocd/platform-addons/bao-notice/default.conf b/argocd/platform-addons/bao-notice/default.conf
index 13ca404..7493c08 100644
--- a/argocd/platform-addons/bao-notice/default.conf
+++ b/argocd/platform-addons/bao-notice/default.conf
@@ -6,6 +6,7 @@ server {
     root /usr/share/nginx/html;
 
     add_header Content-Security-Policy "default-src 'none'; style-src 'unsafe-inline'; frame-ancestors 'none'" always;
+    add_header Strict-Transport-Security "max-age=31536000" always;
     add_header X-Content-Type-Options "nosniff" always;
     add_header Referrer-Policy "no-referrer" always;
     add_header Cache-Control "no-store" always;