fbb-web - set HSTS Header

diff --git a/customer/fbb-web/test.yaml b/customer/fbb-web/test.yaml
index 73bf00cd74e0058a608608b4081ef8466f748ca4..64e4300e812b3be721bdcaccf327eea4521669ac 100644 (file)
--- a/customer/fbb-web/test.yaml
+++ b/customer/fbb-web/test.yaml
@@ -195,6 +195,9 @@ infra::profile::nginx_php_fpm_server::vhosts:
       - '%uri/'
       - '/index.php?$args'
     autoindex: 'on'
+    raw_prepend:
+      - 'add_header Strict-Transport-Security "max-age=31536000" always;'
+      - 'if ($http_x_forwarded_proto != "https") { return 301 https://$host$request_uri; }'
     vhost_cfg_prepend:
       satisfy: 'any'
       allow: