{"id":957,"date":"2025-09-23T15:38:21","date_gmt":"2025-09-23T12:38:21","guid":{"rendered":"https:\/\/narhost.com\/destek\/?p=957"},"modified":"2026-09-12T10:59:57","modified_gmt":"2026-09-12T07:59:57","slug":"hsts-ayarlari-nasil-yapilir","status":"publish","type":"post","link":"https:\/\/narhost.com\/destek\/hsts-ayarlari-nasil-yapilir\/","title":{"rendered":"HSTS Ayarlar\u0131 Nas\u0131l Yap\u0131l\u0131r"},"content":{"rendered":"<p class=\"kb-dogrulama\">Son do\u011frulama: Eyl\u00fcl 2026 \u00b7 cPanel 136 test hesab\u0131nda denendi<\/p>\n<div id=\"hizli-cozum\" class=\"ai-box ai-box--cozum\">\n<p class=\"ai-box-title\">H\u0131zl\u0131 \u00e7\u00f6z\u00fcm<\/p>\n<p><strong>HSTS ayarlar\u0131 nas\u0131l yap\u0131l\u0131r<\/strong> sorusunun cevab\u0131 tek bir sunucu ba\u015fl\u0131\u011f\u0131d\u0131r: siteniz zaten hatas\u0131z HTTPS ile a\u00e7\u0131l\u0131yorsa <code>.htaccess<\/code> dosyan\u0131za Strict-Transport-Security ba\u015fl\u0131\u011f\u0131n\u0131 ekleyip taray\u0131c\u0131ya &#8220;bu siteye her zaman HTTPS ile gel&#8221; talimat\u0131n\u0131 verirsiniz.<\/p>\n<ol>\n<li>\u00d6nce sitenizin tamam\u0131n\u0131n hatas\u0131z HTTPS \u00fczerinden a\u00e7\u0131ld\u0131\u011f\u0131n\u0131 do\u011frulay\u0131n.<\/li>\n<li>cPanel Dosya Y\u00f6neticisi&#8217;nde k\u00f6k dizindeki <code>.htaccess<\/code> dosyas\u0131n\u0131 d\u00fczenleyin.<\/li>\n<li><code>Strict-Transport-Security<\/code> ba\u015fl\u0131\u011f\u0131n\u0131 <code>max-age<\/code>, iste\u011fe ba\u011fl\u0131 <code>includeSubDomains<\/code> ve <code>preload<\/code> parametreleriyle ekleyin.<\/li>\n<li>Dosyay\u0131 kaydedip taray\u0131c\u0131 geli\u015ftirici ara\u00e7lar\u0131ndan ya da <code>curl -I<\/code> ile ba\u015fl\u0131\u011f\u0131n geldi\u011fini do\u011frulay\u0131n.<\/li>\n<\/ol>\n<\/div>\n<table class=\"kb-uyg\">\n<tr>\n<th>Panel<\/th>\n<td>cPanel<\/td>\n<\/tr>\n<tr>\n<th>Sistem<\/th>\n<td>Payla\u015f\u0131ml\u0131 hosting (Apache, CloudLinux)<\/td>\n<\/tr>\n<tr>\n<th>Yetki<\/th>\n<td>cPanel kullan\u0131c\u0131s\u0131<\/td>\n<\/tr>\n<tr>\n<th>Narhost \u00fcr\u00fcn\u00fc<\/th>\n<td><a href=\"https:\/\/narhost.com\/ssl\" title=\"SSL Sertifikas\u0131 - Narhost\">SSL Sertifikas\u0131<\/a>, Web Hosting<\/td>\n<\/tr>\n<\/table>\n<div class=\"kb-once\">\n<p class=\"label\">Ba\u015flamadan \u00f6nce<\/p>\n<ul>\n<li>Sitenizin t\u00fcm sayfalar\u0131, alt alan adlar\u0131 ve d\u0131\u015far\u0131dan \u00e7a\u011fr\u0131lan g\u00f6rsel\/script\/font dosyalar\u0131 hatas\u0131z HTTPS ile y\u00fckleniyor olmal\u0131; kar\u0131\u015f\u0131k i\u00e7erik varsa \u00f6nce <a href=\"https:\/\/narhost.com\/destek\/mixed-content-sorunu-nasil-cozulur\/\" title=\"Kar\u0131\u015f\u0131k i\u00e7erik sorunu nas\u0131l \u00e7\u00f6z\u00fcl\u00fcr - Narhost Destek\">bu sorunu \u00e7\u00f6z\u00fcn<\/a>.<\/li>\n<li>SSL sertifikan\u0131z kurulu ve s\u00fcresi g\u00fcncel olmal\u0131; kurulu de\u011filse \u00f6nce <a href=\"https:\/\/narhost.com\/destek\/cpanel-ssl-sertifikasi-kurma\/\" title=\"cPanel&#039;de SSL sertifikas\u0131 kurma - Narhost Destek\">SSL sertifikas\u0131 kurma<\/a> ad\u0131mlar\u0131n\u0131 tamamlay\u0131n.<\/li>\n<li><code>.htaccess<\/code> dosyas\u0131n\u0131 d\u00fczenlemeden \u00f6nce bir kopyas\u0131n\u0131 indirip yedekleyin.<\/li>\n<li>cPanel kullan\u0131c\u0131 ad\u0131 ve \u015fifrenizle panele giri\u015f yapabiliyor olmal\u0131s\u0131n\u0131z.<\/li>\n<\/ul>\n<\/div>\n<h2>HSTS ayarlar\u0131 nas\u0131l yap\u0131l\u0131r, ne i\u015fe yarar<\/h2>\n<p>HSTS (HTTP Strict Transport Security), bir web sunucusunun taray\u0131c\u0131ya verdi\u011fi tek sat\u0131rl\u0131k bir talimatt\u0131r: &#8220;bu alan ad\u0131na bir daha asla http ile ba\u011flanma, do\u011frudan https kullan.&#8221; Talimat\u0131 bir kez alan taray\u0131c\u0131, ayn\u0131 kullan\u0131c\u0131 adres \u00e7ubu\u011funa &#8220;http:\/\/&#8221; yazsa bile iste\u011fi sunucuya gitmeden \u00f6nce kendi i\u00e7inde https&#8217;e \u00e7evirir. Bu, ba\u011flant\u0131y\u0131 d\u00fc\u015f\u00fcr\u00fcp araya girmeye \u00e7al\u0131\u015fan sald\u0131r\u0131 t\u00fcrlerine kar\u015f\u0131 \u00f6nemli bir kapanmad\u0131r; \u00e7\u00fcnk\u00fc sald\u0131rgan art\u0131k ilk iste\u011fi yakalay\u0131p y\u00f6nlendirmeyi bozamaz.<\/p>\n<p>Ba\u015fl\u0131k olmadan da \u00e7o\u011fu site .htaccess y\u00f6nlendirmesiyle http&#8217;den https&#8217;e ge\u00e7er, ama bu y\u00f6nlendirme her seferinde bir a\u011f iste\u011fi gerektirir ve o ilk istek teorik olarak a\u00e7\u0131kta kal\u0131r. HSTS bu ilk iste\u011fi taray\u0131c\u0131 taraf\u0131nda keserek ortadan kald\u0131r\u0131r.<\/p>\n<h2>.htaccess ile HSTS ba\u015fl\u0131\u011f\u0131 ekleme<\/h2>\n<ol class=\"kb-adimlar\">\n<li><strong>cPanel&#8217;de Dosyalar \u2192 Dosya Y\u00f6neticisi<\/strong> ekran\u0131n\u0131 a\u00e7\u0131n ve alan ad\u0131n\u0131z\u0131n k\u00f6k dizinine gidin. Gizli dosyalar\u0131 g\u00f6ster ayar\u0131 kapal\u0131ysa ayarlar men\u00fcs\u00fcnden a\u00e7\u0131n, aksi h\u00e2lde <code>.htaccess<\/code> listede g\u00f6r\u00fcnmez.<br \/>\n<figure class=\"kb-ekran\"><img decoding=\"async\" src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/09\/hsts-ayarlari-nasil-yapilir-adim-1.webp\" alt=\"HSTS ayarlar\u0131 nas\u0131l yap\u0131l\u0131r s\u00fcrecinde cPanel Dosya Y\u00f6neticisi'nde .htaccess dosyas\u0131n\u0131n g\u00f6r\u00fcnt\u00fclenmesi\" width=\"1200\" height=\"675\" loading=\"lazy\"><figcaption>Dosya Y\u00f6neticisi k\u00f6k dizin g\u00f6r\u00fcn\u00fcm\u00fc; .htaccess dosyas\u0131 burada se\u00e7ilir.<\/figcaption><\/figure>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: dosya listesinde <code>.htaccess<\/code> g\u00f6r\u00fcn\u00fcr.<\/p>\n<\/li>\n<li><strong>Dosyay\u0131 sa\u011f t\u0131klay\u0131p D\u00fczenle&#8217;yi se\u00e7in<\/strong> ve a\u00e7\u0131lan kod d\u00fczenleyiciye a\u015fa\u011f\u0131daki blo\u011fu ekleyin.\n<pre><code class=\"language-apache\">&lt;IfModule mod_headers.c&gt;Header always set Strict-Transport-Security \"max-age=31536000; includeSubDomains; preload\"&lt;\/IfModule&gt;<\/code><\/pre>\n<figure class=\"kb-ekran\"><img decoding=\"async\" src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/09\/hsts-ayarlari-nasil-yapilir-adim-2.webp\" alt=\"cPanel'de .htaccess dosyas\u0131na Strict-Transport-Security ba\u015fl\u0131\u011f\u0131 ekleme ekran\u0131\" width=\"1200\" height=\"675\" loading=\"lazy\"><figcaption>Kod D\u00fczenle penceresi; Strict-Transport-Security sat\u0131r\u0131 buraya eklenir.<\/figcaption><\/figure>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: dosya hatas\u0131z kaydedilir, cPanel &#8220;De\u011fi\u015fiklikler kaydedildi&#8221; onay\u0131 g\u00f6sterir.<\/p>\n<\/li>\n<li><strong>max-age s\u00fcresini se\u00e7in.<\/strong> De\u011fer saniye cinsindendir; 31536000 bir y\u0131la denk gelir. Yeni bir siteyseniz \u00f6nce k\u0131sa bir s\u00fcreyle (\u00f6rne\u011fin 300 saniye) test edip sorun \u00e7\u0131kmazsa s\u00fcreyi bir y\u0131la \u00e7\u0131karman\u0131z daha g\u00fcvenlidir.<\/li>\n<li><strong>includeSubDomains ve preload parametrelerine karar verin.<\/strong> A\u015fa\u011f\u0131daki uyar\u0131y\u0131 okumadan bu iki parametreyi eklemeyin.<\/li>\n<\/ol>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p><code>includeSubDomains<\/code> yazd\u0131\u011f\u0131n\u0131zda mail, webmail, panel gibi t\u00fcm alt alan adlar\u0131n\u0131z\u0131n da hatas\u0131z HTTPS \u00e7al\u0131\u015fmas\u0131 \u015fart olur; biri http&#8217;de kal\u0131rsa eri\u015filemez h\u00e2le gelir. <code>preload<\/code> parametresi sitenizi taray\u0131c\u0131lar\u0131n yerle\u015fik HSTS preload listesine aday yapar; bu listeye girmek geri d\u00f6n\u00fc\u015f\u00fc zor bir ad\u0131md\u0131r, listeden \u00e7\u0131kmak haftalar s\u00fcrebilir. Emin de\u011filseniz preload&#8217;u eklemeyin.<\/p>\n<\/div>\n<h2>Do\u011frulama<\/h2>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>Taray\u0131c\u0131 geli\u015ftirici ara\u00e7lar\u0131n\u0131 a\u00e7\u0131p A\u011f sekmesinden sitenize gelen yan\u0131t ba\u015fl\u0131klar\u0131na bak\u0131n; <code>Strict-Transport-Security<\/code> sat\u0131r\u0131n\u0131 g\u00f6r\u00fcyorsan\u0131z i\u015flem tamamlanm\u0131\u015ft\u0131r. Ayn\u0131 kontrol\u00fc terminalden <code>curl -I https:\/\/alanadiniz.com<\/code> komutuyla da yapabilirsiniz, komut \u00e7\u0131kt\u0131s\u0131nda ayn\u0131 ba\u015fl\u0131k listelenir.<\/p>\n<\/div>\n<h2>HSTS a\u00e7\u0131kken sertifika s\u00fcresi dolarsa<\/h2>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>HSTS aktifken SSL sertifikan\u0131z\u0131n s\u00fcresi dolarsa taray\u0131c\u0131 siteyi http&#8217;ye d\u00fc\u015f\u00fcrmez, do\u011frudan eri\u015filemez hata verir. Bu y\u00fczden sertifika yenileme takibini ihmal etmeyin; <a href=\"https:\/\/narhost.com\/destek\/ssl-sertifikasi-nasil-yenilenir\/\" title=\"SSL sertifikas\u0131 nas\u0131l yenilenir - Narhost Destek\">SSL sertifikas\u0131 nas\u0131l yenilenir<\/a> yaz\u0131s\u0131 yenileme ad\u0131mlar\u0131n\u0131 anlat\u0131r.<\/p>\n<\/div>\n<h2>Cloudflare kullan\u0131yorsan\u0131z<\/h2>\n<p>Alan ad\u0131n\u0131z Cloudflare \u00fczerinden y\u00f6netiliyorsa HSTS ayar\u0131 .htaccess ba\u015fl\u0131\u011f\u0131ndan ayr\u0131 olarak Cloudflare panelinde SSL\/TLS \u2192 Edge Certificates b\u00f6l\u00fcm\u00fcnden a\u00e7\u0131l\u0131r. \u0130ki ayar\u0131 kar\u0131\u015ft\u0131rmay\u0131n: Cloudflare proxy arkas\u0131ndaysan\u0131z ziyaret\u00e7iye giden ba\u015fl\u0131\u011f\u0131 as\u0131l belirleyen taraf Cloudflare&#8217;dir. Ayr\u0131nt\u0131 i\u00e7in <a href=\"https:\/\/developers.cloudflare.com\/ssl\/edge-certificates\/additional-options\/http-strict-transport-security\/\" title=\"Cloudflare HSTS resmi dok\u00fcmantasyonu\" target=\"_blank\" rel=\"noopener\">Cloudflare&#8217;in HSTS dok\u00fcmantasyonuna<\/a> ve <a href=\"https:\/\/narhost.com\/destek\/cloudflare-ssl-nasil-ayarlanir\/\" title=\"Cloudflare SSL nas\u0131l ayarlan\u0131r - Narhost Destek\">Cloudflare SSL ayarlar\u0131<\/a> kart\u0131na bakabilirsiniz.<\/p>\n<h2>H\u00e2l\u00e2 \u00e7\u00f6z\u00fclmediyse<\/h2>\n<ul>\n<li><strong>Ba\u015fl\u0131k taray\u0131c\u0131da g\u00f6r\u00fcnm\u00fcyor.<\/strong> Apache&#8217;de mod_headers mod\u00fcl\u00fc kapal\u0131 olabilir ya da .htaccess yanl\u0131\u015f dizine kaydedilmi\u015f olabilir; Dosya Y\u00f6neticisi&#8217;nde do\u011fru k\u00f6k dizini kontrol edin.<\/li>\n<li><strong>Preload sonras\u0131 baz\u0131 sayfalara eri\u015filemiyor.<\/strong> Bir alt alan ad\u0131 h\u00e2l\u00e2 http \u00fczerinden \u00e7al\u0131\u015f\u0131yor olabilir; o alt alan ad\u0131n\u0131 HTTPS&#8217;ye ta\u015f\u0131yana kadar <code>includeSubDomains<\/code> parametresini kald\u0131r\u0131p yeniden test edin.<\/li>\n<li><strong>SSL sertifikas\u0131 hen\u00fcz kurulu de\u011fil.<\/strong> HSTS ba\u015fl\u0131\u011f\u0131 sertifikas\u0131z i\u015fe yaramaz; \u00f6nce <a href=\"https:\/\/narhost.com\/destek\/cpanel-ssl-sertifikasi-kurma\/\" title=\"cPanel&#039;de SSL sertifikas\u0131 kurma - Narhost Destek\">cPanel&#8217;de SSL sertifikas\u0131 kurma<\/a> ad\u0131mlar\u0131n\u0131 tamamlay\u0131n.<\/li>\n<\/ul>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost deste\u011fi<\/p>\n<p>Ad\u0131mlar\u0131 uygulad\u0131n\u0131z ama sorun s\u00fcr\u00fcyorsa destek talebinize alan ad\u0131n\u0131z\u0131, .htaccess&#8217;e ekledi\u011finiz sat\u0131r\u0131, ald\u0131\u011f\u0131n\u0131z hata mesaj\u0131n\u0131 ve denedi\u011finiz taray\u0131c\u0131y\u0131 ekleyin.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/submitticket.php\" title=\"Narhost destek talebi a\u00e7\">Destek talebi a\u00e7<\/a><\/div>\n<div class=\"kb-ilgili\">\n<p class=\"label\">Sonraki ad\u0131mlar<\/p>\n<ul>\n<li><a href=\"https:\/\/narhost.com\/destek\/ssl-sertifikasi-nasil-dogru-kurulur\/\" title=\"SSL Sertifikas\u0131 Nas\u0131l Do\u011fru Kurulur - Narhost Destek\">SSL Sertifikas\u0131 Nas\u0131l Do\u011fru Kurulur (konu merkezi)<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/ssl-sertifikasi\/\" title=\"SSL Sertifikas\u0131 destek kategorisi - Narhost\">SSL Sertifikas\u0131 destek kategorisi<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/cpanel-ssl-sertifikasi-kurma\/\" title=\"cPanel&#039;de SSL sertifikas\u0131 kurma - Narhost Destek\">cPanel&#8217;de SSL sertifikas\u0131 kurma<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/mixed-content-sorunu-nasil-cozulur\/\" title=\"Kar\u0131\u015f\u0131k i\u00e7erik sorunu nas\u0131l \u00e7\u00f6z\u00fcl\u00fcr - Narhost Destek\">Kar\u0131\u015f\u0131k i\u00e7erik sorunu nas\u0131l \u00e7\u00f6z\u00fcl\u00fcr<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/ssl-sertifikasi-nasil-yenilenir\/\" title=\"SSL sertifikas\u0131 nas\u0131l yenilenir - Narhost Destek\">SSL sertifikas\u0131 nas\u0131l yenilenir<\/a><\/li>\n<\/ul>\n<\/div>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>HSTS ayarlar\u0131 nas\u0131l yap\u0131l\u0131r, tek bir dosya de\u011fi\u015fikli\u011fi yeterli mi?<\/h3>\n<p>Payla\u015f\u0131ml\u0131 hostingde evet; k\u00f6k dizindeki .htaccess dosyas\u0131na Strict-Transport-Security ba\u015fl\u0131\u011f\u0131n\u0131 eklemeniz yeterlidir, ayr\u0131 bir sunucu yeniden ba\u015flatma gerekmez.<\/p>\n<h3>preload parametresi zorunlu mu?<\/h3>\n<p>Hay\u0131r. max-age ve gerekirse includeSubDomains \u00e7o\u011fu site i\u00e7in yeterlidir; preload yaln\u0131zca sitenizin tamam\u0131 ve t\u00fcm alt alan adlar\u0131 kal\u0131c\u0131 olarak HTTPS \u00e7al\u0131\u015facaksa eklenir.<\/p>\n<h3>HSTS&#8217;i kapatmak istersem ne olur?<\/h3>\n<p>max-age de\u011ferini 0 yap\u0131p bir s\u00fcre beklemeniz gerekir; taray\u0131c\u0131lar \u00f6nceden ald\u0131klar\u0131 talimat\u0131 s\u00fcresi dolana kadar haf\u0131zalar\u0131nda tutar, bu y\u00fczden kapatma an\u0131nda etkili olmaz.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>HSTS ayarlar\u0131 nas\u0131l yap\u0131l\u0131r: cPanel Dosya Y\u00f6neticisi&#8217;nde .htaccess dosyas\u0131na Strict-Transport-Security ba\u015fl\u0131\u011f\u0131 ekleyip max-age, includeSubDomains ve preload parametrelerini do\u011fru se\u00e7menin ad\u0131mlar\u0131, do\u011frulama ve Cloudflare uyar\u0131s\u0131.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[110],"class_list":["post-957","post","type-post","status-publish","format-standard","hentry","category-ssl-sertifikasi","tag-hsts"],"meta_box":[],"_links":{"self":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/957","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/comments?post=957"}],"version-history":[{"count":3,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/957\/revisions"}],"predecessor-version":[{"id":1360,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/957\/revisions\/1360"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/media?parent=957"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/categories?post=957"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/tags?post=957"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}