Software /
code /
prosody-modules
Comparison
mod_strict_https/README.md @ 6003:fe081789f7b5
All community modules: Unify file extention of Markdown files to .md
author | Menel <menel@snikket.de> |
---|---|
date | Tue, 22 Oct 2024 10:26:01 +0200 |
parent | 5415:mod_strict_https/README.markdown@f8797e3284ff |
comparison
equal
deleted
inserted
replaced
6002:5a65a632d5b9 | 6003:fe081789f7b5 |
---|---|
1 --- | |
2 summary: HTTP Strict Transport Security | |
3 --- | |
4 | |
5 # Introduction | |
6 | |
7 This module implements [RFC 6797: HTTP Strict Transport Security] and | |
8 responds to all non-HTTPS requests with a `301 Moved Permanently` | |
9 redirect to the HTTPS equivalent of the path. | |
10 | |
11 # Configuration | |
12 | |
13 Add the module to the `modules_enabled` list and optionally configure | |
14 the specific header sent. | |
15 | |
16 ``` lua | |
17 modules_enabled = { | |
18 ... | |
19 "strict_https"; | |
20 } | |
21 hsts_header = "max-age=31556952" | |
22 ``` | |
23 | |
24 If the redirect from `http://` to `https://` causes trouble with | |
25 internal use of HTTP APIs it can be disabled: | |
26 | |
27 ``` lua | |
28 hsts_redirect = false | |
29 ``` | |
30 | |
31 # Compatibility | |
32 | |
33 ------- ------------- | |
34 trunk Should work | |
35 0.12 Should work | |
36 0.11 Should work | |
37 ------- ------------- |