tmakinen/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

apache: Add support for HTTP Strict Transport Security

Browse source
This commit is contained in:
Ossi Salmi 2013-08-14 14:31:23 +03:00
parent a3b970ab8e
commit e6d7688bdc
4 changed files with 20 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apache/manifests/init.pp
View file

@ -266,6 +266,9 @@ class apache::sslserver::listen {
# $first:
# Bool for whether this is the first (default) vhost
# when using NameVirtualHost. Defaults to false.
# $hsts:
# Bool for whether to enable HTTP Strict Transport Security for this
# virtual host. Defaults to false.
# $ipaddr:
# IP address of virtual host. Defaults to _default_.
# $root:
@ -285,15 +288,21 @@ class apache::sslserver::listen {
# ssl_key => "puppet:///path/to/www.example.com.key",
# }
#
define apache::sslsite($first=false, $ipaddr="_default_", $root="", $ssl_cert="", $ssl_key="", $ssl_chain="") {
define apache::sslsite($first=false, $hsts=false, $ipaddr="_default_", $root="",
$ssl_cert="", $ssl_key="", $ssl_chain="") {
include apache::sslserver::listen
if $hsts == true {
include apache::mod::headers
}
case $::operatingsystem {
"debian","ubuntu": {
$apache_ssldir = "/etc/ssl"
apache::debian::sslsite { $name:
first => $first,
hsts => $hsts,
ipaddr => $ipaddr,
root => $root,
ssl_cert => $ssl_cert,
@ -306,6 +315,7 @@ define apache::sslsite($first=false, $ipaddr="_default_", $root="", $ssl_cert=""
$apache_ssldir = "/etc/pki/tls"
apache::redhat::sslsite { $name:
first => $first,
hsts => $hsts,
ipaddr => $ipaddr,
root => $root,
ssl_cert => $ssl_cert,