[Qa-jenkins-scm] [jenkins.debian.net] 07/08: apache: set the X-Forwarded-* headers only in the jenkins.d.n virtualhost

[Mattia Rizzolo]

This is an automated email from the git hooks/post-receive script.

mattia pushed a commit to branch master
in repository jenkins.debian.net.

commit e77ed3e1ea3c69da53ab71e040509237102e86c9
Author: Mattia Rizzolo <mattia at debian.org>
Date:   Fri Apr 6 16:03:31 2018 +0200

    apache: set the X-Forwarded-* headers only in the jenkins.d.n virtualhost
    
    Signed-off-by: Mattia Rizzolo <mattia at debian.org>
---
 hosts/jenkins/etc/apache2/sites-available/jenkins.debian.net.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/hosts/jenkins/etc/apache2/sites-available/jenkins.debian.net.conf b/hosts/jenkins/etc/apache2/sites-available/jenkins.debian.net.conf
index 590f058..6b2eded 100644
--- a/hosts/jenkins/etc/apache2/sites-available/jenkins.debian.net.conf
+++ b/hosts/jenkins/etc/apache2/sites-available/jenkins.debian.net.conf
@@ -45,8 +45,6 @@
 	ProxyRequests Off
 
 	# HSTS
-	RequestHeader set X-Forwarded-Proto "https"
-	RequestHeader set X-Forwarded-Port "443"
 	Header always add Strict-Transport-Security "max-age=15552000"
 
 	ErrorLog ${APACHE_LOG_DIR}/error.log
@@ -106,6 +104,8 @@ Use https-redirect www.reproducible-builds.org
 	RewriteCond %{REQUEST_URI} ^/userContent/rbuild/
 	RewriteRule ^/userContent/(.*) https://reproducible.debian.net/debian/$1 [R=301,L]
 
+	RequestHeader set X-Forwarded-Port "443"
+	RequestHeader set X-Forwarded-Proto "https"
 	<Proxy *>
 		Require all granted
 	</Proxy>

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/qa/jenkins.debian.net.git