Use chronic instead of filtering the output of the stunnel4 init script on restart

[mirror/dsa-puppet.git] / modules / apache2 / files / puppet-ssl-macros

diff --git a/modules/apache2/files/puppet-ssl-macros b/modules/apache2/files/puppet-ssl-macros
index 69bc424..c56dd00 100644 (file)
--- a/modules/apache2/files/puppet-ssl-macros
+++ b/modules/apache2/files/puppet-ssl-macros
@@ -1,8 +1,10 @@
 <IfModule mod_ssl.c>
   <IfModule mod_macro.c>
     <Macro common-ssl-HSTS>
-      # Add two month HSTS header
-      Header always add Strict-Transport-Security "max-age=5184000"
+      <IfModule mod_headers.c>
+        # Add two month HSTS header
+        Header always add Strict-Transport-Security "max-age=15552000"
+      </IfModule>
     </Macro>
 
     <Macro common-debian-service-ssl $name>