HSTS-Header muss per php-File gesetzt werden:

~/www/owncloud-system/lib/private$ vi response.php 
header('X-Robots-Tag: none'); // https://developers.google.com/webmasters/control-crawl-index/docs/robots_meta_tag
header('Strict-Transport-Security: max-age=15768000;env=HTTPS'); // HSTS