This one is pretty simple, just add the following to your .htaccess file:
# Security header Enable HSTS Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS
Once you have done so, use a website like https://hstspreload.org/ to test your site!
