X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Ffiles%2Fdebconf_wafer%2Fwafertest.debconf.org;h=f94f87b4038154fa95b8a9049704c85f7184d97e;hb=3b29c4516cf2a90765ee8a2609157e502c4f7182;hp=66e9b51028e49998495ab2f0ec994224c66c718b;hpb=594ba45a0aaf7be0ad8e74089342611fd56042f1;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/files/debconf_wafer/wafertest.debconf.org b/modules/roles/files/debconf_wafer/wafertest.debconf.org
index 66e9b5102..f94f87b40 100644
--- a/modules/roles/files/debconf_wafer/wafertest.debconf.org
+++ b/modules/roles/files/debconf_wafer/wafertest.debconf.org
@@ -4,7 +4,7 @@ Use common-debian-service-https-redirect * wafertest.debconf.org
 
 WSGIDaemonProcess wafertest \
   processes=3 threads=2 \
-  user=www-data group=www-data maximum-requests=750 umask=0007 display-name=wsgi-wafertest.debconf.org \
+  user=www-data group=debconf-web maximum-requests=750 umask=0007 display-name=wsgi-wafertest.debconf.org \
   python-path=/srv/debconf-web/wafertest.debconf.org/dc18.dc.o/:/srv/debconf-web/wafertest.debconf.org/dc18.dc.o/ve/lib/python3.5/site-packages/
 
 <VirtualHost *:443>
@@ -17,6 +17,7 @@ WSGIDaemonProcess wafertest \
   Use common-debian-service-ssl wafertest.debconf.org
   Use common-ssl-HSTS
 
+  Header always set Referrer-Policy "same-origin"
   Header always set X-Content-Type-Options nosniff
   Header always set X-XSS-Protection "1; mode=block"
 #  Header always set Access-Control-Allow-Origin: "*"
@@ -25,7 +26,6 @@ WSGIDaemonProcess wafertest \
   SSLCACertificateFile /var/lib/dsa/sso/ca.crt
   SSLCARevocationCheck chain
   SSLCARevocationFile /var/lib/dsa/sso/ca.crl
-  SSLVerifyClient optional
 
   WSGIProcessGroup wafertest
   WSGIScriptAlias / /srv/debconf-web/wafertest.debconf.org/dc18.dc.o/wsgi.py