redirect linux updates to fastly

[mirror/dsa-puppet.git] / modules / roles / templates / security_mirror / security.debian.org.erb

diff --git a/modules/roles/templates/security_mirror/security.debian.org.erb b/modules/roles/templates/security_mirror/security.debian.org.erb
index c5961ea..d4be2a4 100644 (file)
--- a/modules/roles/templates/security_mirror/security.debian.org.erb
+++ b/modules/roles/templates/security_mirror/security.debian.org.erb
@@ -39,6 +39,11 @@
    RewriteEngine on
    RewriteRule ^/$      http://www.debian.org/security/
 
+   RewriteCond %{HTTP:Fastly-Client-IP} !. [NV]
+   RewriteRule ^/(pool/updates/main/l/linux/.*) http://security-cdn.debian.org/$1 [L,R=302]
+   RewriteCond %{HTTP:Fastly-Client-IP} !. [NV]
+   RewriteRule ^/debian-security/(pool/updates/main/l/linux/.*) http://security-cdn.debian.org/$1 [L,R=302]
+
    # Possible values include: debug, info, notice, warn, error, crit,
    # alert, emerg.
    LogLevel warn