ccchb
/
ansible
mirror of https://dev.ccchb.de/ccchb/ansible.git
3
0
Fork 0
Code Issues Releases Wiki Activity

Enable HSTS for mediawiki

This commit is contained in:
Fritz Grimpen 2021-03-10 11:30:18 +00:00
parent 3c1aed2eee
commit c5ecf1df63
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/mediawiki/defaults/main.yml
View File

@ -40,6 +40,8 @@ mediawiki_nginx_conf: |
ssl_certificate_key /etc/letsencrypt/live/{{ mediawiki_domain }}/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/{{ mediawiki_domain }}/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/{{ mediawiki_domain }}/chain.pem; ssl_trusted_certificate /etc/letsencrypt/live/{{ mediawiki_domain }}/chain.pem;
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
client_max_body_size 100M; client_max_body_size 100M;
include snippets/certbot.conf; include snippets/certbot.conf;