Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Make the remaining flask applications send the cookie over https only

Browse source
This commit is contained in:
Pierre-Yves Chibon 2015-02-04 15:27:56 +01:00
parent 73b1222f6b
commit f05af51730
2 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/anitya/frontend/templates/anitya.cfg
View file

@ -24,3 +24,5 @@ ANITYA_WEB_FEDORA_OPENID = 'https://id.fedoraproject.org'
# This is required to fix login
PREFERRED_URL_SCHEME='https'
# Make browsers send session cookie only via HTTPS
SESSION_COOKIE_SECURE=True

3
roles/mirrormanager/frontend2/templates/mirrormanager2.cfg
View file

@ -23,7 +23,8 @@ SECRET_KEY = '{{ mirrormanager_secret_key }}'
# This should be kept really secret!
PASSWORD_SEED = "{{ mirrormanager_password_seed }}"
# Make browsers send session cookie only via HTTPS
SESSION_COOKIE_SECURE=True
###
# Other configuration items for the web-app