Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add hsts also to https virthost

Browse source
This commit is contained in:
Kevin Fenzi 2015-12-01 18:37:05 +00:00
parent 41df45256c
commit 6e5df77ce7
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/keyserver/files/sks.conf
View file

@ -43,7 +43,6 @@ NameVirtualHost *:443
RewriteEngine On RewriteEngine On
RewriteCond %{HTTPS} off RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [NE] RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [NE]
# Set HSTS header via HTTP since it cannot be easily set in squid, which terminates HTTPS
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
</VirtualHost> </VirtualHost>
@ -63,6 +62,7 @@ NameVirtualHost *:443
ProxyPassReverse / http://localhost:11371/ ProxyPassReverse / http://localhost:11371/
SetEnv proxy-nokeepalive 1 SetEnv proxy-nokeepalive 1
ProxyVia Full ProxyVia Full
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
</VirtualHost> </VirtualHost>
<VirtualHost *:443> <VirtualHost *:443>
ServerAdmin sysadmin-keys-members@fedoraproject.org ServerAdmin sysadmin-keys-members@fedoraproject.org