Mercurial > repos > other > Puppet

changeset 111:501afb45ffc7 puppet-3.6

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Make sure that HTTPS redirects have the full set of headers
author IBBoard <dev@ibboard.co.uk>
date Sat, 04 Jun 2016 14:05:14 +0100
parents be2b30b17a4c
children 5967c1b18860
files modules/website/manifests/https/redir.pp
diffstat 1 files changed, 6 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/modules/website/manifests/https/redir.pp	Tue May 31 22:02:15 2016 +0100
+++ b/modules/website/manifests/https/redir.pp	Sat Jun 04 14:05:14 2016 +0100
@@ -89,6 +89,11 @@
     $group = $docroot_group
   }
 
+  $custom_conf = 'Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"
+Header always set X-Xss-Protection "1; mode=block"
+Header always set X-Content-Type-Options "nosniff"
+Header always set X-Frame-Options "SAMEORIGIN"'
+
   apache::vhost { $name:
     ip              => $ip,
     port            => '443',
@@ -97,7 +102,7 @@
     docroot_group   => $group,
     redirect_status => 'permanent',
     redirect_dest   => $redir,
-    custom_fragment => 'Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"',
+    custom_fragment => $custom_conf,
     logroot         => '/var/log/apache/',
     access_log_file => "access_${logpart}${log_extra}.log",
     error_log_file  => "error_${logpart}${log_extra}.log",