diff --git a/roles/kojipkgs/files/kojipkgs.conf b/roles/kojipkgs/files/kojipkgs.conf
index 204eaf77c8..790b161099 100644
--- a/roles/kojipkgs/files/kojipkgs.conf
+++ b/roles/kojipkgs/files/kojipkgs.conf
@@ -58,3 +58,5 @@ Alias /rhel /mnt/fedora_koji/rhel
     Require all granted
 </Directory>
 
+# Set HSTS header via HTTP since it cannot be easily set in squid, which terminates HTTPS
+Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"