BBlack has submitted this change and it was merged.

Change subject: ishmael - Raise HSTS max-age to 1 year and add "always"
......................................................................


ishmael - Raise HSTS max-age to 1 year and add "always"

I832e85fe enabled HSTS with max-age=7 days.

Bug: T40516
Change-Id: I0656409e2f73ac6e90440f67e4debe796a79a6e8
---
M modules/ishmael/templates/apache/ishmael.wikimedia.org.erb
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  BBlack: Verified; Looks good to me, approved



diff --git a/modules/ishmael/templates/apache/ishmael.wikimedia.org.erb 
b/modules/ishmael/templates/apache/ishmael.wikimedia.org.erb
index 78e3383..b9ed142 100644
--- a/modules/ishmael/templates/apache/ishmael.wikimedia.org.erb
+++ b/modules/ishmael/templates/apache/ishmael.wikimedia.org.erb
@@ -11,7 +11,7 @@
     RewriteCond %{HTTP:X-Forwarded-Proto} !https
     RewriteRule ^/(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} 
[R=301,E=ProtoRedirect]
     Header always merge Vary X-Forwarded-Proto env=ProtoRedirect
-    Header set Strict-Transport-Security "max-age=604800"
+    Header always set Strict-Transport-Security "max-age=31536000"
 
     <Directory "<%= @docroot %>">
         Options FollowSymLinks

-- 
To view, visit https://gerrit.wikimedia.org/r/206992
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I0656409e2f73ac6e90440f67e4debe796a79a6e8
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Chmarkine <[email protected]>
Gerrit-Reviewer: BBlack <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: JanZerebecki <[email protected]>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to