Merge pull request #141 from jdno/enable-new-hsts-headers-in-prod

jdno · web-flow · commit 6adb73b98c3f · 2022-10-24T14:03:53.000+02:00
Enable response header policy for crates.io
diff --git a/terraform/crates-io/envs.tf b/terraform/crates-io/envs.tf
@@ -21,6 +21,8 @@ module "prod" {
   webapp_origin_domain = "crates-io.herokuapp.com"
 
   iam_prefix = "crates-io"
+
+  strict_security_headers = true
 }
 
 module "staging" {

Original file line number	Diff line number	Diff line change
`@@ -21,6 +21,8 @@ module "prod" {`
`21`	`21`	`webapp_origin_domain = "crates-io.herokuapp.com"`
`22`	`22`
`23`	`23`	`iam_prefix = "crates-io"`
	`24`	`+`
	`25`	`+ strict_security_headers = true`
`24`	`26`	`}`
`25`	`27`
`26`	`28`	`module "staging" {`