[ansible] Allow to disable hsts
commit ce39396ff6da99f54b2d62369f40a27549961fb6
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Sun Nov 27 10:21:39 2016 +0100
Allow to disable hsts
roles/httpd/website/templates/website.conf | 2 ++
1 files changed, 2 insertions(+), 0 deletions(-)
---
diff --git a/roles/httpd/website/templates/website.conf
b/roles/httpd/website/templates/website.conf
index 6547452..9d87025 100644
--- a/roles/httpd/website/templates/website.conf
+++ b/roles/httpd/website/templates/website.conf
@@ -46,8 +46,10 @@
SSLCipherSuite {{ ssl_ciphers }}
{% if sslonly %}
+{% if not sslonly_no_hsts %}
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains;
preload"
{% endif %}
+{% endif %}
Include "conf.d/{{ name }}/*.conf"
</VirtualHost>
{% endif %}