summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDan Goodliffe <dan@randomdan.homeip.net>2017-11-04 16:13:47 +0000
committerDan Goodliffe <dan@randomdan.homeip.net>2017-11-04 16:24:16 +0000
commit2ecd703badfde6c7f15c39829aa7f170bb61dbb6 (patch)
treebb4cc0fc8921b3944bf3ca23d9cf1da628bdb654
parentAdd SSL vhost for git.randomdan.homeip.net (diff)
downloadconfig-2ecd703badfde6c7f15c39829aa7f170bb61dbb6.tar.bz2
config-2ecd703badfde6c7f15c39829aa7f170bb61dbb6.tar.xz
config-2ecd703badfde6c7f15c39829aa7f170bb61dbb6.zip
Enable HSTS for SSL sites
-rw-r--r--etc/apache/httpd.conf2
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/apache/httpd.conf b/etc/apache/httpd.conf
index 7bd35c6..10fddfd 100644
--- a/etc/apache/httpd.conf
+++ b/etc/apache/httpd.conf
@@ -138,6 +138,7 @@ PerlSetVar JavaScriptMinifier JavaScript::Minifier::XS
SSLCertificateFile /etc/letsencrypt/live/gentoobrowse.randomdan.homeip.net/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/gentoobrowse.randomdan.homeip.net/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/gentoobrowse.randomdan.homeip.net/chain.pem
+ Header always set Strict-Transport-Security "max-age=864000; includeSubDomains"
</VirtualHost>
<VirtualHost *:443>
ServerName git.randomdan.homeip.net
@@ -145,4 +146,5 @@ PerlSetVar JavaScriptMinifier JavaScript::Minifier::XS
SSLCertificateFile /etc/letsencrypt/live/git.randomdan.homeip.net/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/git.randomdan.homeip.net/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/git.randomdan.homeip.net/chain.pem
+ Header always set Strict-Transport-Security "max-age=864000; includeSubDomains"
</VirtualHost>