jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-07-31 03:35:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2022-04-29 11:00

Browse Source
This commit is contained in:
Daniel Berteaud
2022-04-29 11:00:10 +02:00
parent ed77591a35
commit 17cd763bf4
30 changed files with 619 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/nginx/defaults/main.yml
View File

@@ -84,6 +84,8 @@ nginx_default_vhost_base:
nginx_default_vhost_extra: {}
nginx_default_vhost: "{{ nginx_default_vhost_base | combine(nginx_default_vhost_extra,recursive=True) }}"
# Should HSTS header be added on the default vhost
nginx_hsts: True
# List of IP addresses which won't be affected by maintenance redirections
nginx_maintenance_ip: []

2
roles/nginx/templates/nginx.conf.j2
View File

@@ -90,7 +90,9 @@ http {
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
{% if nginx_hsts %}
add_header Strict-Transport-Security $hsts_header;
{% endif %}
include /etc/nginx/ansible_conf.d/acme.inc;