Mercurial > repos > other > Puppet

annotate modules/website/templates/https_core_conf.erb @ 173:c72d2b5f9be2 puppet-3.6

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Try to fix NextCloud warnings about "wrong" headers The problem is that "always set" results in two values and NextCloud checks for a perfect match. Removing "always" means header only gets added on "success" pages and not error pages, so hopefully it still gets added in all appropriate places.
author IBBoard <dev@ibboard.co.uk>
date Sat, 17 Feb 2018 20:59:37 +0000
parents 9cf4ebd6d2ba
children 4519b727cc4c
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
152
ff7ebe76c6e9 Add missing HTTPS site config template
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
1 Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"
173
c72d2b5f9be2 Try to fix NextCloud warnings about "wrong" headers
IBBoard <dev@ibboard.co.uk>
parents: 156
diff changeset
2 Header set X-Xss-Protection "1; mode=block"
c72d2b5f9be2 Try to fix NextCloud warnings about "wrong" headers
IBBoard <dev@ibboard.co.uk>
parents: 156
diff changeset
3 Header set X-Content-Type-Options "nosniff"
c72d2b5f9be2 Try to fix NextCloud warnings about "wrong" headers
IBBoard <dev@ibboard.co.uk>
parents: 156
diff changeset
4 Header set X-Frame-Options "SAMEORIGIN"
152
ff7ebe76c6e9 Add missing HTTPS site config template
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
5
155
e661cb2dd942 Make sure that we still redirect to non-www if we want it
IBBoard <dev@ibboard.co.uk>
parents: 152
diff changeset
6 RewriteCond %{HTTP_HOST} !=<%= @primary_name %>
156
9cf4ebd6d2ba Remove slash in redirect because group catches path slash
IBBoard <dev@ibboard.co.uk>
parents: 155
diff changeset
7 RewriteRule ^(.*)$ https://<%= @primary_name %>$1 [R=301,L]