summaryrefslogtreecommitdiff
path: root/templates/vhosts/perl
diff options
context:
space:
mode:
authormh <mh@immerda.ch>2010-12-06 17:40:46 +0100
committermh <mh@immerda.ch>2010-12-06 17:40:46 +0100
commita87d7b91cc95c8ac7aee327e4cf4d3ce564cdea1 (patch)
tree7c97eba3a7610c8151ab9d8e048cad77f1dd7d06 /templates/vhosts/perl
parentc8c3719c722c23dc5c4187eaf487947340a95478 (diff)
add STS header for enforced SSL sites
* http://en.wikipedia.org/wiki/Strict_Transport_Security This will tell browsers to interact with that site only per HTTPS.
Diffstat (limited to 'templates/vhosts/perl')
-rw-r--r--templates/vhosts/perl/perl.erb8
1 files changed, 8 insertions, 0 deletions
diff --git a/templates/vhosts/perl/perl.erb b/templates/vhosts/perl/perl.erb
index b922637..5153925 100644
--- a/templates/vhosts/perl/perl.erb
+++ b/templates/vhosts/perl/perl.erb
@@ -131,6 +131,10 @@
AddDefaultCharset <%= default_charset %>
<%- end -%>
+ <%- if ssl_mode.to_s == 'force' then -%>
+ Header add Strict-Transport-Security "max-age=15768000"
+
+ <%- end -%>
<%- if run_mode.to_s =~ /(proxy\-|static\-)?itk/ -%>
<IfModule mpm_itk_module>
AssignUserId <%= run_uid+" "+run_gid %>
@@ -338,6 +342,10 @@
AddDefaultCharset <%= default_charset %>
<%- end -%>
+ <%- if ssl_mode.to_s == 'force' then -%>
+ Header add Strict-Transport-Security "max-age=15768000"
+
+ <%- end -%>
<%- unless run_mode.to_s == 'static-itk' -%>
<Directory "<%= documentroot %>/">
AllowOverride <%= allow_override %>