Required changes regarding https protocol

Hello IW Team,

my client recently had the IT security audit. Results show following issues:

- client-initiated renegotiation - is turned on

- http strict transport security (HSTS) doesn't work

- hsts preload - is turned off.

I would like to change above mentioned setting permamently to maintain the settings after update.

Best rgeards