changeset 152:ff7ebe76c6e9 puppet-3.6

Add missing HTTPS site config template
author IBBoard <dev@ibboard.co.uk>
date Tue, 28 Mar 2017 20:50:17 +0100
parents 1ad747713519
children cf3ee1fb3f10
files modules/website/templates/https_core_conf.erb
diffstat 1 files changed, 7 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/modules/website/templates/https_core_conf.erb	Tue Mar 28 20:50:17 2017 +0100
@@ -0,0 +1,7 @@
+Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"
+Header always set X-Xss-Protection "1; mode=block"
+Header always set X-Content-Type-Options "nosniff"
+Header always set X-Frame-Options "SAMEORIGIN"
+
+RewriteCond %{HTTP_HOST} !=<%= @name %>
+RewriteRule ^(.*)$ https://<%= @name %>/$1 [R=301,L]