marusich pushed a commit to branch master
in repository maintenance.

commit ddc2420c6f921c03d448c29e2e8da9210a69c1c0
Author: Chris Marusich <[email protected]>
Date:   Fri Dec 28 21:27:23 2018 -0800

    cdn: Allow clients to use both HTTP and HTTPS.
    
    * cdn/terraform/main.tf (berlin-mirror) <viewer_protocol_policy>:
    Change to "allow-all".
---
 cdn/terraform/main.tf | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/cdn/terraform/main.tf b/cdn/terraform/main.tf
index 00b5f55..e249437 100644
--- a/cdn/terraform/main.tf
+++ b/cdn/terraform/main.tf
@@ -229,7 +229,10 @@ resource "aws_cloudfront_distribution" "berlin-mirror" {
     max_ttl = 31536000 # 365 days
     min_ttl = 0
     target_origin_id = "berlin.guixsd.org"
-    viewer_protocol_policy = "https-only"
+    # Before ci.guix.info pointed to this distribution, it allowed
+    # both HTTP and HTTPS.  We choose to maintain that policy here.
+    # In the future, we should consider changing this to "https-only".
+    viewer_protocol_policy = "allow-all"
   }
   # TODO: Maybe add more behaviors for specific paths/prefixes.
   # ordered_cache_behavior {}

Reply via email to