From: Andreas Gerstenberg <gerstenberg@pixelpark.com>
Date: Thu, 19 Apr 2018 09:19:55 +0000 (+0200)
Subject: spk-blog add HSTS and rewrite to https
X-Git-Tag: v0.1.0~1245
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=f009e4a7ef4fd8cb13f4c9d8b63d0672d59e96f8;p=pixelpark%2Fhiera.git

spk-blog add HSTS and rewrite to https
---

diff --git a/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml b/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml
index 6dc53587..734885a7 100644
--- a/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml
+++ b/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml
@@ -58,7 +58,15 @@ infra::profile::wordpress::projects:
     directories:
     setenvif:
       - "HTTPS on HTTPS=on"
+    headers_ssl:
+      - always set Strict-Transport-Security "max-age=31556926"
     rewrites:
+      - comment: 'Weiterleitung auf https'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on [NC]'
+          - '%{literal("%")}{HTTP_HOST} ^(www\.)?sparkasseblog.de'
+        rewrite_rule:
+          - '^(.*)$ https://sparkasseblog.de$1 [R=301,L]'
       - comment: 'westmuensterland-intern.sparkasseblog.de'
         rewrite_cond:
           - '%{literal("%")}{HTTP_HOST} westmuensterland-intern.sparkasseblog.de'