Chmarkine has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/195444

Change subject: Enable HSTS on racktables with max-age=7days
......................................................................

Enable HSTS on racktables with max-age=7days

https://racktables.wikimedia.org is HTTPS only,
so let's enable HSTS.

Bug: T40516
Change-Id: I62dc0268105b371bbcb256bb44bfbe029f86185c
---
M modules/racktables/templates/racktables.wikimedia.org.erb
1 file changed, 1 insertion(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/44/195444/1

diff --git a/modules/racktables/templates/racktables.wikimedia.org.erb 
b/modules/racktables/templates/racktables.wikimedia.org.erb
index 757bf6b..dfe506e 100644
--- a/modules/racktables/templates/racktables.wikimedia.org.erb
+++ b/modules/racktables/templates/racktables.wikimedia.org.erb
@@ -13,6 +13,7 @@
     RewriteCond %{REQUEST_URI} !^/status$
     RewriteRule ^/(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} 
[R=301,E=ProtoRedirect]
     Header always merge Vary X-Forwarded-Proto env=ProtoRedirect
+    Header set Strict-Transport-Security "max-age=604800"
 
     DocumentRoot /srv/org/wikimedia/racktables/wwwroot
     <Directory />

-- 
To view, visit https://gerrit.wikimedia.org/r/195444
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I62dc0268105b371bbcb256bb44bfbe029f86185c
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Chmarkine <chmark...@hotmail.com>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to