BBlack has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/219159

Change subject: HTTPS: raise HSTS default floor to 3 days
......................................................................

HTTPS: raise HSTS default floor to 3 days

Change-Id: Ie9be0423a2e56d3a7773ba7b16db30608117a6f8
---
M modules/varnish/templates/vcl/wikimedia.vcl.erb
1 file changed, 1 insertion(+), 4 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/59/219159/1

diff --git a/modules/varnish/templates/vcl/wikimedia.vcl.erb 
b/modules/varnish/templates/vcl/wikimedia.vcl.erb
index d3a9c1a..0be0b78 100644
--- a/modules/varnish/templates/vcl/wikimedia.vcl.erb
+++ b/modules/varnish/templates/vcl/wikimedia.vcl.erb
@@ -205,11 +205,8 @@
                if (req.http.Host ~ "(?i)^ru\.") {
                        set resp.http.Strict-Transport-Security = 
"max-age=15768000";
                }
-               else if (req.http.Host ~ "(?i)^(ca|el|en|he|it|ug|zh)\.") {
-                       set resp.http.Strict-Transport-Security = 
"max-age=259200";
-               }
                else if (!resp.http.Strict-Transport-Security) {
-                       set resp.http.Strict-Transport-Security = 
"max-age=86400";
+                       set resp.http.Strict-Transport-Security = 
"max-age=259200";
                }
        }
 }

-- 
To view, visit https://gerrit.wikimedia.org/r/219159
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie9be0423a2e56d3a7773ba7b16db30608117a6f8
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <bbl...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to