comparison modules/website/manifests/https.pp @ 105:e50dab7495d7 puppet-3.6

Make sure that we're always setting HSTS headers, even when cannonicalising domains
author IBBoard <dev@ibboard.co.uk>
date Sat, 23 Apr 2016 16:28:47 +0100
parents 16e9e26337be
children ef0926ee389a
comparison
equal deleted inserted replaced
104:32d9331af12c 105:e50dab7495d7
27 27
28 $shortname = domain_to_short_name($name) 28 $shortname = domain_to_short_name($name)
29 $logpart = $shortname 29 $logpart = $shortname
30 $shortdomain = domain_to_short_domain($name) 30 $shortdomain = domain_to_short_domain($name)
31 31
32 $custom_conf0 = 'Header add Strict-Transport-Security "max-age=16070400; includeSubDomains"' 32 $custom_conf0 = 'Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"'
33 33
34 if $force_no_index { 34 if $force_no_index {
35 $custom_conf1 = "$custom_conf0 35 $custom_conf1 = "$custom_conf0
36 Include conf.extra/no-index.conf" 36 Include conf.extra/no-index.conf"
37 } else { 37 } else {