diff --git a/data/etc/apache2/conf-available/freedombox.conf b/data/etc/apache2/conf-available/freedombox.conf
new file mode 100644
index 000000000..3156b3722
--- /dev/null
+++ b/data/etc/apache2/conf-available/freedombox.conf
@@ -0,0 +1,11 @@
+##
+## Enable HSTS, even for subdomains.
+##
+Header set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS
+
+##
+## Redirect traffic on home to /plinth as part of turning the machine
+## into FreedomBox server.  Plinth then acts as a portal to reach all
+## other services.
+##
+RedirectMatch "^/$" "/plinth"