Enable HTTP2 and HSTS

2017-04-07 18:20:22 +02:00
parent 4e5d452aff
commit 6bea5b7567
5 changed files with 7 additions and 5 deletions
--- a/site-cookbooks/kosmos-mediawiki/templates/default/nginx.conf.erb
+++ b/site-cookbooks/kosmos-mediawiki/templates/default/nginx.conf.erb
@@ -1,6 +1,6 @@
 server {
        listen 80;
-        listen 443 ssl;
+        listen 443 ssl http2;
        server_name <%= @server_name %>;

        access_log   /var/log/nginx/<%= @server_name %>.access.log;
@@ -30,6 +30,7 @@ server {
                fastcgi_param HTTP_PROXY "";
        }

+        add_header Strict-Transport-Security "max-age=15768000; includeSubDomains";
        ssl_certificate <%= @ssl_cert %>;
        ssl_certificate_key <%= @ssl_key %>;
 }