BBlack has uploaded a new change for review.
https://gerrit.wikimedia.org/r/284112
Change subject: varnish redir: wmfusercontent.org -> www.wikimedia.org
......................................................................
varnish redir: wmfusercontent.org -> www.wikimedia.org
This is in support of STS-preload for wmfusercontent.org
Bug: T132452
Change-Id: I6f133d661674edaea16be7af0c905dab0f2a0e39
---
M templates/varnish/misc-frontend.inc.vcl.erb
1 file changed, 7 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/12/284112/1
diff --git a/templates/varnish/misc-frontend.inc.vcl.erb
b/templates/varnish/misc-frontend.inc.vcl.erb
index b843d1b..98a589f 100644
--- a/templates/varnish/misc-frontend.inc.vcl.erb
+++ b/templates/varnish/misc-frontend.inc.vcl.erb
@@ -20,6 +20,13 @@
set req.http.X-Forwarded-Port = "443";
}
+ // STS-preload checker doesn't like [45]xx responses, but 3xx is OK, so
+ // re-use the TLS-redirector code and send them to the wikimedia site.
+ if (req.http.Host == "wmfusercontent.org") {
+ set req.http.Location = "https://www.wikimedia.org";;
+ <%= error_synth(751, "TLS Redirect") -%>
+ }
+
call misc_recv_pass;
}
--
To view, visit https://gerrit.wikimedia.org/r/284112
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I6f133d661674edaea16be7af0c905dab0f2a0e39
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <bbl...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
