Enable HSTS by default

Hi all,

some things have changed since Michael wrote his great Knowledgebase article here http://licensecart.com/plugin/suppor...sl-security/2/
E.g. the cipher can now be set via the SSL dialogue in Nodeworx. But this does not apply to SSL certs saved in siteworx, does it? Looking at any sites's vhost_domain.conf file, I don't see any mention of the cipher anymore.
Where is the cipher stored. And how can I change it and better yet change the default cipher for all new certificates?

And how can I enable HSTS by default for new cerrtificates? Or is Michael#s way still the only way to achieve perfect results? Could I set both in ssl.conf?

Thanks