From f009e4a7ef4fd8cb13f4c9d8b63d0672d59e96f8 Mon Sep 17 00:00:00 2001
From: Andreas Gerstenberg <gerstenberg@pixelpark.com>
Date: Thu, 19 Apr 2018 11:19:55 +0200
Subject: [PATCH] spk-blog add HSTS and rewrite to https

---
 customer/spk-blog/sparkasseblog01.pixelpark.net.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml b/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml
index 6dc53587..734885a7 100644
--- a/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml
+++ b/customer/spk-blog/sparkasseblog01.pixelpark.net.yaml
@@ -58,7 +58,15 @@ infra::profile::wordpress::projects:
     directories:
     setenvif:
       - "HTTPS on HTTPS=on"
+    headers_ssl:
+      - always set Strict-Transport-Security "max-age=31556926"
     rewrites:
+      - comment: 'Weiterleitung auf https'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on [NC]'
+          - '%{literal("%")}{HTTP_HOST} ^(www\.)?sparkasseblog.de'
+        rewrite_rule:
+          - '^(.*)$ https://sparkasseblog.de$1 [R=301,L]'
       - comment: 'westmuensterland-intern.sparkasseblog.de'
         rewrite_cond:
           - '%{literal("%")}{HTTP_HOST} westmuensterland-intern.sparkasseblog.de'
-- 
2.39.5