X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Ftemplates%2Fsecurity_mirror%2Fsecurity.debian.org.erb;h=d4be2a44094868276cd1124c5e2c91da0999923a;hb=a245784ed5c12aedc4ac3e19bac9b216daee2571;hp=c5961ead404870a38a133a5cdb3ffe1fabf3babb;hpb=372685900fc51ce956bddc100bc534327946bb10;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/templates/security_mirror/security.debian.org.erb b/modules/roles/templates/security_mirror/security.debian.org.erb
index c5961ead4..d4be2a440 100644
--- a/modules/roles/templates/security_mirror/security.debian.org.erb
+++ b/modules/roles/templates/security_mirror/security.debian.org.erb
@@ -39,6 +39,11 @@
    RewriteEngine on
    RewriteRule ^/$      http://www.debian.org/security/
 
+   RewriteCond %{HTTP:Fastly-Client-IP} !. [NV]
+   RewriteRule ^/(pool/updates/main/l/linux/.*) http://security-cdn.debian.org/$1 [L,R=302]
+   RewriteCond %{HTTP:Fastly-Client-IP} !. [NV]
+   RewriteRule ^/debian-security/(pool/updates/main/l/linux/.*) http://security-cdn.debian.org/$1 [L,R=302]
+
    # Possible values include: debug, info, notice, warn, error, crit,
    # alert, emerg.
    LogLevel warn