Files
fedora-infra_ansible/roles/httpd/reverseproxy/templates/reversepassproxy.id.conf
Patrick Uiterwijk cabbfe3015 Deploy split servers to prod
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 22:46:24 +00:00

26 lines
747 B
Plaintext

RequestHeader unset Expect early
RequestHeader set X-Forwarded-Scheme https early
RequestHeader set X-Forwarded-Proto https early
# Cannot redirect to HTTPS for *.id.fedoraproject.org or set
# "includeSubdomains", because relying parties need to be able to access
# username.id.fedoraproject.org via plain HTTP
Header always add Strict-Transport-Security "max-age=15768000; preload"
RewriteEngine on
RewriteRule ^(.+) - [PT]
<Location /login>
# required for rewrite rule
Options +SymLinksIfOwnerMatch
RewriteEngine on
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
</Location>
ProxyPass {{localpath}} {{proxyurl}}{{remotepath}}
ProxyPassReverse {{localpath}} {{proxyurl}}{{remotepath}}