Set referrer-policy to same-origin on debtags.d.o
[mirror/dsa-puppet.git] / modules / roles / files / debtags / debtags.debian.org
1 Use common-debian-service-https-redirect * debtags.debian.org
2 <VirtualHost *:80>
3     ServerName debtags.debian.net
4     ServerAdmin debian-admin@lists.debian.org
5
6     CustomLog /var/log/apache2/debtags.debian.org-access.log privacy
7     ErrorLog /var/log/apache2/debtags.debian.org-error.log
8
9     Redirect permanent / https://debtags.debian.org/
10 </VirtualHost>
11
12
13 WSGIDaemonProcess debtags.debian.org user=nobody group=debtags home=/ processes=2 threads=5 maximum-requests=5000 inactivity-timeout=1800 umask=0077 display-name=wsgi-debtags.debian.org
14
15 <VirtualHost *:443>
16     ServerName debtags.debian.org
17     ServerAdmin debian-admin@lists.debian.org
18
19     Use common-debian-service-ssl debtags.debian.org
20     Use common-ssl-HSTS
21     Use http-pkp-debtags.debian.org
22
23     SSLCACertificateFile /var/lib/dsa/sso/ca.crt
24     SSLCARevocationCheck chain
25     SSLCARevocationFile /var/lib/dsa/sso/ca.crl
26     SSLVerifyClient optional
27
28     SSLOptions +StdEnvVars
29
30     <IfModule mod_userdir.c>
31         UserDir disabled
32     </IfModule>
33     ErrorLog /var/log/apache2/debtags.debian.org-error.log
34     CustomLog /var/log/apache2/debtags.debian.org-access.log privacy
35     ServerSignature On
36
37
38     <Directory /srv/debtags.debian.org/htdocs>
39         Require all granted
40     </Directory>
41     Alias /static/ /srv/debtags.debian.org/htdocs/
42
43     <Directory /srv/debtags.debian.org/debtagsd/debtagsd>
44         <Files wsgi.py>
45             Require all granted
46         </Files>
47     </Directory>
48
49     WSGIScriptAlias / /srv/debtags.debian.org/debtagsd/debtagsd/wsgi.py
50     WSGIProcessGroup debtags.debian.org
51     WSGIPassAuthorization On
52
53     Header always set Referrer-Policy "same-origin"
54 </VirtualHost>
55
56 # vim: syntax=apache ts=4 sw=4 sts=4 sr et