use ttyS1 for the serial console on casulana

[mirror/dsa-puppet.git] / modules / roles / files / debconf_wafer / wafertest.debconf.org

diff --git a/modules/roles/files/debconf_wafer/wafertest.debconf.org b/modules/roles/files/debconf_wafer/wafertest.debconf.org
index 946b74c..f94f87b 100644 (file)
--- a/modules/roles/files/debconf_wafer/wafertest.debconf.org
+++ b/modules/roles/files/debconf_wafer/wafertest.debconf.org
@@ -17,6 +17,7 @@ WSGIDaemonProcess wafertest \
   Use common-debian-service-ssl wafertest.debconf.org
   Use common-ssl-HSTS
 
+  Header always set Referrer-Policy "same-origin"
   Header always set X-Content-Type-Options nosniff
   Header always set X-XSS-Protection "1; mode=block"
 #  Header always set Access-Control-Allow-Origin: "*"
@@ -25,7 +26,6 @@ WSGIDaemonProcess wafertest \
   SSLCACertificateFile /var/lib/dsa/sso/ca.crt
   SSLCARevocationCheck chain
   SSLCARevocationFile /var/lib/dsa/sso/ca.crl
-  SSLVerifyClient optional
 
   WSGIProcessGroup wafertest
   WSGIScriptAlias / /srv/debconf-web/wafertest.debconf.org/dc18.dc.o/wsgi.py