salt/ansible
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Set HSTS on Nextcloud

Browse Source
This commit is contained in:
Salt 2020-12-29 10:01:46 -06:00
parent ed4fe73467
commit 31c4e91f7f
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
playbooks/web.yml
View File

@ -16,6 +16,7 @@
apache_remove_default_vhost: yes apache_remove_default_vhost: yes
apache_packages_state: latest apache_packages_state: latest
apache_mods_enabled: apache_mods_enabled:
- headers.load
- ssl.load - ssl.load
- proxy.load - proxy.load
- proxy_http.load - proxy_http.load
@ -32,6 +33,8 @@
Redirect permanent / https://git.desu.ltd Redirect permanent / https://git.desu.ltd
apache_vhosts_ssl: apache_vhosts_ssl:
- servername: nc.desu.ltd - servername: nc.desu.ltd
extra_parameters: |
Header always set Strict-Transport-Security "max-age=31536000"
documentroot: /var/www/nc.desu.ltd documentroot: /var/www/nc.desu.ltd
certificate_file: /etc/letsencrypt/live/desu.ltd/fullchain.pem certificate_file: /etc/letsencrypt/live/desu.ltd/fullchain.pem
certificate_key_file: /etc/letsencrypt/live/desu.ltd/privkey.pem certificate_key_file: /etc/letsencrypt/live/desu.ltd/privkey.pem