From: Peter Palfrader <peter@palfrader.org>
Date: Sun, 9 Oct 2016 11:03:30 +0000 (+0200)
Subject: Enable HTTP PKP for syncproxy vhosts
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=39cd73a3d3b8ad1226dc72f42cefd45d5a3f1287;p=mirror%2Fdsa-puppet.git

Enable HTTP PKP for syncproxy vhosts
---

diff --git a/modules/roles/templates/syncproxy/syncproxy.debian.org-apache.erb b/modules/roles/templates/syncproxy/syncproxy.debian.org-apache.erb
index 0fc7f79ec..bebc6be31 100644
--- a/modules/roles/templates/syncproxy/syncproxy.debian.org-apache.erb
+++ b/modules/roles/templates/syncproxy/syncproxy.debian.org-apache.erb
@@ -15,6 +15,7 @@ Use common-debian-service-https-redirect "<%= vhost_listen %>" <%= syncproxy_nam
 
    Use common-debian-service-ssl <%= syncproxy_name %>
    Use common-ssl-HSTS
+   Use http-pkp-<%= syncproxy_name %>
 
    <Directory /srv/www/syncproxy.debian.org/htdocs>
       Require all granted