Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add HSTS header to bodhi, elections, fas, pkgdb

Browse source 
Seems like this needs to be configured in the reverse proxy config as it
is done for id.
This commit is contained in:
Till Maas 2015-02-04 12:10:33 +01:00
parent ec8b1d7891
commit bd5407d679
4 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/httpd/reverseproxy/templates/reversepassproxy.bodhi.conf
View file

@ -4,3 +4,5 @@ Header unset Set-Cookie
ProxyPass {{localpath}} {{proxyurl}}{{remotepath}}
ProxyPassReverse {{localpath}} {{proxyurl}}{{remotepath}}
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"

2
roles/httpd/reverseproxy/templates/reversepassproxy.elections.conf
View file

@ -8,3 +8,5 @@ Header unset Set-Cookie
ProxyPass {{localpath}} {{proxyurl}}{{remotepath}}
ProxyPassReverse {{localpath}} {{proxyurl}}{{remotepath}}
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"

2
roles/httpd/reverseproxy/templates/reversepassproxy.fas.conf
View file

@ -10,3 +10,5 @@ ProxyPassReverse /accounts/user/dogencert http://fas1/
ProxyPass {{localpath}} {{proxyurl}}{{remotepath}}
ProxyPassReverse {{localpath}} {{proxyurl}}{{remotepath}}
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"

2
roles/httpd/reverseproxy/templates/reversepassproxy.pkgdb.conf
View file

@ -37,3 +37,5 @@ Header unset Set-Cookie
ProxyPass {{localpath}} {{proxyurl}}{{remotepath}}
ProxyPassReverse {{localpath}} {{proxyurl}}{{remotepath}}
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"