.NET Boxed
.NET project templates with batteries included
..., and adds a Strict Transport Security (HSTS) HTTP header with preloading enabled. Both in-memory and distributed cache are configured. You do need to specify where the distributed cache stores its data. Allow configuring Kestrel security limits such as maximum request size via configuration and set sensible stricter defaults.