upstream/opnsense-plugins
1
0
Fork 0
mirror of https://github.com/opnsense/plugins.git synced 2026-06-13 19:00:22 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

net/haproxy: HSTS is only applicable to HTTP frontends

Browse source
This commit is contained in:
Frank Wall 2017-12-08 00:31:13 +01:00 committed by Franco Fichtner
parent 190b48b3e5
commit 139ef0a634
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
View file

@ -607,7 +607,7 @@ frontend {{frontend.name}}
{% do ssl_options.append('ciphers ' ~ frontend.ssl_cipherList) %}
{% endif %}
{# # HSTS #}
{% if frontend.ssl_hstsEnabled|default("") == '1' %}
{% if frontend.ssl_hstsEnabled|default("") == '1' and frontend.mode == 'http' %}
http-response set-header Strict-Transport-Security max-age={{frontend.ssl_hstsMaxAge}}
{% endif %}
{% endif %}