Chmarkine has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/198469

Change subject: gdash - Enable HSTS max-age=7 days
......................................................................

gdash - Enable HSTS max-age=7 days

I29515ddd redirects http://gdash.wikimedia.org to
https://gdash.wikimedia.org. So enable HSTS on this
domain.

Bug: T40516
Change-Id: Ibcc91ae7ed79900cc59cfb04b9c20f5f4f8e9789
---
M templates/apache/sites/gdash.wikimedia.org.erb
1 file changed, 1 insertion(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/69/198469/1

diff --git a/templates/apache/sites/gdash.wikimedia.org.erb 
b/templates/apache/sites/gdash.wikimedia.org.erb
index 1468928..6daf441 100644
--- a/templates/apache/sites/gdash.wikimedia.org.erb
+++ b/templates/apache/sites/gdash.wikimedia.org.erb
@@ -9,6 +9,7 @@
     RewriteCond %{REQUEST_URI} !^/status$
     RewriteRule ^/(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} 
[R=301,E=ProtoRedirect]
     Header always merge Vary X-Forwarded-Proto env=ProtoRedirect
+    Header set Strict-Transport-Security "max-age=604800"
 
     <Location />
         SetHandler uwsgi-handler

-- 
To view, visit https://gerrit.wikimedia.org/r/198469
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ibcc91ae7ed79900cc59cfb04b9c20f5f4f8e9789
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Chmarkine <chmark...@hotmail.com>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to