From Nginx perspective any of next two constructions is valid:
A.
add_header Strict-Transport-Security "max-age=0; includeSubDomains" always;
B.
add_header Strict-Transport-Security
"
max-age=0
;
includeSubDomains
"
always
;
But both ones can't be parsed correctly.