Comparison

mod_strict_https/README.md @ 6003:fe081789f7b5

All community modules: Unify file extention of Markdown files to .md
author Menel <menel@snikket.de>
date Tue, 22 Oct 2024 10:26:01 +0200
parent 5415:mod_strict_https/README.markdown@f8797e3284ff
comparison
equal deleted inserted replaced
6002:5a65a632d5b9 6003:fe081789f7b5
1 ---
2 summary: HTTP Strict Transport Security
3 ---
4
5 # Introduction
6
7 This module implements [RFC 6797: HTTP Strict Transport Security] and
8 responds to all non-HTTPS requests with a `301 Moved Permanently`
9 redirect to the HTTPS equivalent of the path.
10
11 # Configuration
12
13 Add the module to the `modules_enabled` list and optionally configure
14 the specific header sent.
15
16 ``` lua
17 modules_enabled = {
18 ...
19 "strict_https";
20 }
21 hsts_header = "max-age=31556952"
22 ```
23
24 If the redirect from `http://` to `https://` causes trouble with
25 internal use of HTTP APIs it can be disabled:
26
27 ``` lua
28 hsts_redirect = false
29 ```
30
31 # Compatibility
32
33 ------- -------------
34 trunk Should work
35 0.12 Should work
36 0.11 Should work
37 ------- -------------