|  | @@ -50,11 +50,17 @@ KEY_HASH=$(openssl rsa -in $KEY_FILENAME -outform der -pubout | openssl dgst -sh
 | 
	
		
			
			| 50 | 50 |  
 | 
	
		
			
			| 51 | 51 |  PIN_HEADER="add_header Public-Key-Pins 'pin-sha256=\"${KEY_HASH}\"; max-age=5184000; includeSubDomains';"
 | 
	
		
			
			| 52 | 52 |  if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
 | 
	
		
			
			| 53 |  | -    sed -i "/add_header Access-Control-Allow-Origin.*/a $PIN_HEADER" $SITE_FILENAME
 | 
	
		
			
			|  | 53 | +    sed -i "/ssl_ciphers.*/a $PIN_HEADER" $SITE_FILENAME
 | 
	
		
			
			| 54 | 54 |  else
 | 
	
		
			
			| 55 | 55 |      sed -i "s/add_header Public-Key-Pins.*/$PIN_HEADER/g" $SITE_FILENAME
 | 
	
		
			
			| 56 | 56 |  fi
 | 
	
		
			
			| 57 | 57 |  
 | 
	
		
			
			| 58 | 58 |  systemctl restart nginx
 | 
	
		
			
			| 59 | 59 |  
 | 
	
		
			
			|  | 60 | +if ! grep -q "add_header Public-Key-Pins" $SITE_FILENAME; then
 | 
	
		
			
			|  | 61 | +    echo $'Pinning failed'
 | 
	
		
			
			|  | 62 | +fi
 | 
	
		
			
			|  | 63 | +
 | 
	
		
			
			|  | 64 | +echo "Pinned $DOMAIN_NAME with hash $KEY_HASH"
 | 
	
		
			
			|  | 65 | +
 | 
	
		
			
			| 60 | 66 |  exit 0
 |