From 565fb7deb563ed17328a8fcaef1bc8791a4df344 Mon Sep 17 00:00:00 2001
From: Till Maas <opensource@till.name>
Date: Thu, 19 Feb 2015 23:58:27 +0100
Subject: [PATCH] kojipkgs: Add HSTS header

---
 roles/kojipkgs/files/kojipkgs.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/kojipkgs/files/kojipkgs.conf b/roles/kojipkgs/files/kojipkgs.conf
index 204eaf77c8..790b161099 100644
--- a/roles/kojipkgs/files/kojipkgs.conf
+++ b/roles/kojipkgs/files/kojipkgs.conf
@@ -58,3 +58,5 @@ Alias /rhel /mnt/fedora_koji/rhel
     Require all granted
 </Directory>
 
+# Set HSTS header via HTTP since it cannot be easily set in squid, which terminates HTTPS
+Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"