spk-blog add HSTS and rewrite to https

diff --git a/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml b/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml
index 6dc5358702a5306069df1f8feea41290cbd7d74d..734885a7f0bb0887f691ab624b24e99a4083544c 100644 (file)
--- a/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml
+++ b/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml
@@ -58,7 +58,15 @@ infra::profile::wordpress::projects:
     directories:
     setenvif:
       - "HTTPS on HTTPS=on"
+    headers_ssl:
+      - always set Strict-Transport-Security "max-age=31556926"
     rewrites:
+      - comment: 'Weiterleitung auf https'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on [NC]'
+          - '%{literal("%")}{HTTP_HOST} ^(www\.)?sparkasseblog.de'
+        rewrite_rule:
+          - '^(.*)$ https://sparkasseblog.de$1 [R=301,L]'
       - comment: 'westmuensterland-intern.sparkasseblog.de'
         rewrite_cond:
           - '%{literal("%")}{HTTP_HOST} westmuensterland-intern.sparkasseblog.de'