Chmarkine has uploaded a new change for review.
https://gerrit.wikimedia.org/r/206992
Change subject: ishmael - Raise HSTS max-age to 1 year and add "always"
......................................................................
ishmael - Raise HSTS max-age to 1 year and add "always"
I832e85fe enabled HSTS with max-age=7 days.
Bug: T40516
Change-Id: I0656409e2f73ac6e90440f67e4debe796a79a6e8
---
M modules/ishmael/templates/apache/ishmael.wikimedia.org.erb
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/92/206992/1
diff --git a/modules/ishmael/templates/apache/ishmael.wikimedia.org.erb
b/modules/ishmael/templates/apache/ishmael.wikimedia.org.erb
index 78e3383..b9ed142 100644
--- a/modules/ishmael/templates/apache/ishmael.wikimedia.org.erb
+++ b/modules/ishmael/templates/apache/ishmael.wikimedia.org.erb
@@ -11,7 +11,7 @@
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteRule ^/(.*)$ https://%{HTTP_HOST}%{REQUEST_URI}
[R=301,E=ProtoRedirect]
Header always merge Vary X-Forwarded-Proto env=ProtoRedirect
- Header set Strict-Transport-Security "max-age=604800"
+ Header always set Strict-Transport-Security "max-age=31536000"
<Directory "<%= @docroot %>">
Options FollowSymLinks
--
To view, visit https://gerrit.wikimedia.org/r/206992
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I0656409e2f73ac6e90440f67e4debe796a79a6e8
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Chmarkine <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
