annotate modules/website/templates/https_core_conf.erb @ 152:ff7ebe76c6e9 puppet-3.6

Add missing HTTPS site config template
author IBBoard <dev@ibboard.co.uk>
date Tue, 28 Mar 2017 20:50:17 +0100
parents
children e661cb2dd942
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
152
ff7ebe76c6e9 Add missing HTTPS site config template
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
1 Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"
ff7ebe76c6e9 Add missing HTTPS site config template
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
2 Header always set X-Xss-Protection "1; mode=block"
ff7ebe76c6e9 Add missing HTTPS site config template
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
3 Header always set X-Content-Type-Options "nosniff"
ff7ebe76c6e9 Add missing HTTPS site config template
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
4 Header always set X-Frame-Options "SAMEORIGIN"
ff7ebe76c6e9 Add missing HTTPS site config template
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
5
ff7ebe76c6e9 Add missing HTTPS site config template
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
6 RewriteCond %{HTTP_HOST} !=<%= @name %>
ff7ebe76c6e9 Add missing HTTPS site config template
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
7 RewriteRule ^(.*)$ https://<%= @name %>/$1 [R=301,L]