humm/ansible
1
0
Fork 0
forked from ccchb/ansible
Code Issues Pull requests Projects Releases Wiki Activity

Enable HSTS for mediawiki

Browse source
This commit is contained in:
Fritz Grimpen 2021-03-10 11:30:18 +00:00
parent 3c1aed2eee
commit c5ecf1df63
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/mediawiki/defaults/main.yml
View file

@ -40,6 +40,8 @@ mediawiki_nginx_conf: |
ssl_certificate_key /etc/letsencrypt/live/{{ mediawiki_domain }}/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/{{ mediawiki_domain }}/chain.pem;
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
client_max_body_size 100M;
include snippets/certbot.conf;