From adb9176cc535ceec081de39ff5bcf12111fcc546 Mon Sep 17 00:00:00 2001
From: Thomas Dalichow <thomas.dalichow@publicispixelpark.de>
Date: Thu, 21 Jun 2018 15:43:20 +0200
Subject: [PATCH] fbb-web - set HSTS Header

---
 customer/fbb-web/test.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/customer/fbb-web/test.yaml b/customer/fbb-web/test.yaml
index 73bf00cd..64e4300e 100644
--- a/customer/fbb-web/test.yaml
+++ b/customer/fbb-web/test.yaml
@@ -195,6 +195,9 @@ infra::profile::nginx_php_fpm_server::vhosts:
       - '%uri/'
       - '/index.php?$args'
     autoindex: 'on'
+    raw_prepend:
+      - 'add_header Strict-Transport-Security "max-age=31536000" always;'
+      - 'if ($http_x_forwarded_proto != "https") { return 301 https://$host$request_uri; }'
     vhost_cfg_prepend:
       satisfy: 'any'
       allow:
-- 
2.39.5