phil/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Let Caddy's HSTS header replace the one HeyForm sends

Browse Source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Phil
2026-10-31 17:49:15 -06:00
co-authored by Claude Opus 5.5
parent 9b4df20080
commit d1770a87e5
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/docker/templates/Caddyfile.j2
+5 -1
View File
@@ -1,7 +1,11 @@
# Tell browsers to always use HTTPS for each site for a year. No # Tell browsers to always use HTTPS for each site for a year. No
# includeSubDomains, so hosts not served here are unaffected. # includeSubDomains, so hosts not served here are unaffected.
# defer: replace any HSTS header an app sends itself, so there's only one.
(hsts) { (hsts) {
header Strict-Transport-Security "max-age=31536000" header {
Strict-Transport-Security "max-age=31536000"
defer
}
} }
{{ subdomains.pocketid }} { {{ subdomains.pocketid }} {