Files
fedora-infra_ansible/roles/httpd/reverseproxy/templates/reversepassproxy.id.conf
Till Maas 8f7acb0dde Increase HSTS max age to one year
The HSTS preload list requires this now: https://hstspreload.org/
2018-02-07 12:42:36 +01:00

26 lines
746 B
Plaintext

RequestHeader unset Expect early
RequestHeader set X-Forwarded-Scheme https early
RequestHeader set X-Forwarded-Proto https early
# Cannot redirect to HTTPS for *.id.fedoraproject.org or set
# "includeSubdomains", because relying parties need to be able to access
# username.id.fedoraproject.org via plain HTTP
Header always add Strict-Transport-Security "max-age=31536000; preload"
RewriteEngine on
RewriteRule ^(.+) - [PT]
<Location /login>
# required for rewrite rule
Options +SymLinksIfOwnerMatch
RewriteEngine on
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
</Location>
ProxyPass {{localpath}} {{proxyurl}}{{remotepath}}
ProxyPassReverse {{localpath}} {{proxyurl}}{{remotepath}}