<IfModule mod_macro.c>
<%=
- $cert_dir_le = '/srv/puppet.debian.org/from-letsencrypt'
+ $cert_dir_le = scope().call_function('hiera', ['paths.letsencrypt_dir'])
$cert_dir_backup = '/srv/puppet.debian.org/backup-keys'
def make_pin_macro(site)
res << "<Macro http-pkp-#{site}>"
if pin_info.size >= 2 then
pin_info = pin_info.map{ |x| x.gsub('"', '\"') }
- pin_info << "max-age=86400"
+ # 60 days
+ pin_info << "max-age=5184000"
pin_str = pin_info.join("; ")
res << " Header always set Public-Key-Pins \"#{pin_str}\""
else