[Conf] Přidání HPKP, zatím jen Report-Only

spaze · spaze · commit 7a54445c6d08 · 2016-10-23T18:31:32.000+02:00
diff --git a/conf/prod-https.conf b/conf/prod-https.conf
@@ -8,3 +8,4 @@ resolver 8.8.8.8 8.8.4.4;
 ssl_dhparam /etc/nginx/certs/jakobejitblokaci.cz.dhparams.pem;
 
 add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
+add_header Public-Key-Pins-Report-Only 'pin-sha256="RhHxYaY5UGlpZnGUAK9hC15MfRxOrBZYzHEAOnWJAPo="; pin-sha256="i12W7qWJaVdCDA9Rb5r9VUAWtp18cZmY+QqRq2RpYWU="; pin-sha256="aC72IzZk6QOl4rq5xjY7mkUzQswUI0BhCGyN2SR3S88="; max-age=600; includeSubdomains; report-uri="https://plz.report-uri.io/r/default/hpkp/reportOnly"';

Original file line number	Diff line number	Diff line change
`@@ -8,3 +8,4 @@ resolver 8.8.8.8 8.8.4.4;`
`8`	`8`	`ssl_dhparam /etc/nginx/certs/jakobejitblokaci.cz.dhparams.pem;`
`9`	`9`
`10`	`10`	`add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;`
	`11`	`+add_header Public-Key-Pins-Report-Only 'pin-sha256="RhHxYaY5UGlpZnGUAK9hC15MfRxOrBZYzHEAOnWJAPo="; pin-sha256="i12W7qWJaVdCDA9Rb5r9VUAWtp18cZmY+QqRq2RpYWU="; pin-sha256="aC72IzZk6QOl4rq5xjY7mkUzQswUI0BhCGyN2SR3S88="; max-age=600; includeSubdomains; report-uri="https://plz.report-uri.io/r/default/hpkp/reportOnly"';`