ExpressJS always redirect to HTTPS with HSTS

server.js

const express = require('express');
const app = express();

app.use(function (req, res, next) {
  if (req.secure) {
    res.set('Strict-Transport-Security', 'max-age=63072000; includeSubdomains; preload');
    return next();
  }
  
  res.redirect(301, 'https://' + req.headers.host + req.url);
});