Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Set HSTS on id.fp.o manually to disable subdomains

Browse source
This commit is contained in:
Patrick Uiterwijk 2015-02-20 21:32:18 +00:00
parent fce6d6f115
commit 62c73923f3
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/httpd/reverseproxy/templates/reversepassproxy.id.conf
View file

@ -26,6 +26,8 @@ RewriteRule ^([a-z0-9-]+)\.id\.fedoraproject\.org/.* {{proxyurl}}/openid/id/$1/
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L]
Header always add Strict-Transport-Security "max-age=15768000; preload"
RewriteRule ^(.+) - [PT]