pfizer - make changes for WAF: PFIZ-4989

diff --git a/customer/pfizer/web02-pfizer-de.pixelpark.net.yaml b/customer/pfizer/web02-pfizer-de.pixelpark.net.yaml
index a7cb86507357441587924188b25ce9852b8977e5..535f98d5e3681ae50189c84e3e0cfd5976e39105 100644 (file)
--- a/customer/pfizer/web02-pfizer-de.pixelpark.net.yaml
+++ b/customer/pfizer/web02-pfizer-de.pixelpark.net.yaml
@@ -77,6 +77,7 @@ infra::profile::typo3::projects:
       - redaktion-relaunch-meet-pfizer-de.pixelpark.net
       - redaktion-relaunch-sab-simplex-de.pixelpark.net
     ssl: true
+    ssl_real: false
     cert_servername: 'wildcard.pixelpark.net'
     cert_customer: 'pixelpark'    
     ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
@@ -130,6 +131,8 @@ infra::profile::typo3::projects:
       memory_limit: 512M
       upload_max_filesize: 120M
       post_max_size: 120M
+    setenvif_ssl:
+      - 'HTTPS on X-Forwarded-Proto=https'
     rewrites:
       - pfizermed_rw2:
         comment: 'Rewrites fuer Pfizermed'
@@ -458,7 +461,7 @@ infra::profile::typo3::projects:
       - PFIZ-1837:
         comment: https://jira.pixelpark.com/jira/browse/PFIZ-1837
         rewrite_cond:
-          - '%%{ich-trickse}{HTTPS} !=on'
+          - '%%{ich-trickse}{HTTP:X-Forwarded-Proto} !=https'
         rewrite_rule:
           - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
       - PFIZ-2445: