How to enable HTTP Strict-Transport-Security (HSTS) and OCSP Stapling for all domains in Plesk?

Currently, there is no such functionality in Plesk.

If you would like to see this feature in Plesk, please vote for it on the Plesk UserVoice portal.

As a workaround,  it’s possible to automatically enable HSTS for all domains via CLI:

Note: as of now only HTTP Strict-Transport-Security (HSTS) could be enabled for all domains via CLI. OCSP stapling needs to be enabled manually for each domain via Plesk interface as mentioned in this article

1. Log in to the server via SSH.
2. Run the command below to generate a list of all domains:

   # plesk bin site –list > domains.txt

3. Execute the script below to enable HSTS for all domains from the domains.txt file: 

   # for i in `cat domains.txt`; do plesk ext sslit –hsts -enable -domain $i; done