view modules/website/templates/https_core_conf.erb @ 152:ff7ebe76c6e9 puppet-3.6

Add missing HTTPS site config template
author IBBoard <dev@ibboard.co.uk>
date Tue, 28 Mar 2017 20:50:17 +0100
parents
children e661cb2dd942
line wrap: on
line source

Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"
Header always set X-Xss-Protection "1; mode=block"
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options "SAMEORIGIN"

RewriteCond %{HTTP_HOST} !=<%= @name %>
RewriteRule ^(.*)$ https://<%= @name %>/$1 [R=301,L]