diff --git a/playbooks/debops/apache.yml b/playbooks/debops/apache.yml
index e66838d..6ca5ca3 100644
--- a/playbooks/debops/apache.yml
+++ b/playbooks/debops/apache.yml
@@ -59,6 +59,12 @@
         tasks_from: 'main_env'
       tags: [ 'role::apache', 'role::apache:env' ]
 
+  post_tasks:
+
+    - name: Remove include subdomains for HSTS policy
+      shell: |-
+        sed -i '/; includeSubDomains/d' etc/apache2/sites-available/000-default.conf
+
   roles:
 
     - role: apache