Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Enable h2 on pagure.io

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2018-02-10 21:27:14 +00:00
parent 6e7e0bacc5
commit 173c68df67
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/pagure/frontend/templates/0_pagure.conf
View file

@ -68,6 +68,8 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na
SSLEngine on
SSLProtocol {{ ssl_protocols }}
SSLCipherSuite {{ ssl_ciphers }}
Protocols h2 http/1.1
# Use secure TLSv1.1 and TLSv1.2 ciphers
Header always add Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
@ -124,6 +126,7 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na
SSLCertificateFile /etc/pki/tls/certs/docs.pagure.org.crt
SSLCertificateChainFile /etc/pki/tls/certs/docs.pagure.org.intermediate.crt
SSLCertificateKeyFile /etc/pki/tls/certs/docs.pagure.org.key
Protocols h2 http/1.1
{% if env == 'pagure-staging' %}
Redirect permanent / https://stg.pagure.io/
{% else %}
@ -144,6 +147,7 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na
SSLEngine on
SSLProtocol {{ ssl_protocols }}
SSLCipherSuite {{ ssl_ciphers }}
Protocols h2 http/1.1
# Use secure TLSv1.1 and TLSv1.2 ciphers
Header always add Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
@ -176,6 +180,7 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na
{% endif %}
AddType application/octet-stream msi
Protocols h2 http/1.1
<Directory />
Options +Indexes