diff --git a/config/traefik/middleware-hsts.yaml b/config/traefik/middleware-hsts.yaml
new file mode 100644
index 0000000..3a55a25
--- /dev/null
+++ b/config/traefik/middleware-hsts.yaml
@@ -0,0 +1,13 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: hsts
+  namespace: kube-system  # oder der Namespace, in dem Traefik läuft
+spec:
+  headers:
+    sslRedirect: true
+    forceSTSHeader: true
+    stsSeconds: 15552000
+    stsIncludeSubdomains: true
+    stsPreload: true
+