Mercurial > repos > other > Puppet
changeset 152:ff7ebe76c6e9 puppet-3.6
Add missing HTTPS site config template
author | IBBoard <dev@ibboard.co.uk> |
---|---|
date | Tue, 28 Mar 2017 20:50:17 +0100 |
parents | 1ad747713519 |
children | cf3ee1fb3f10 |
files | modules/website/templates/https_core_conf.erb |
diffstat | 1 files changed, 7 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/modules/website/templates/https_core_conf.erb Tue Mar 28 20:50:17 2017 +0100 @@ -0,0 +1,7 @@ +Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains" +Header always set X-Xss-Protection "1; mode=block" +Header always set X-Content-Type-Options "nosniff" +Header always set X-Frame-Options "SAMEORIGIN" + +RewriteCond %{HTTP_HOST} !=<%= @name %> +RewriteRule ^(.*)$ https://<%= @name %>/$1 [R=301,L]