Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ensure forward secrecy #94

Merged
merged 3 commits into from May 17, 2017
Merged

Ensure forward secrecy #94

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
d6d902f
Ensure forward secrecy
tamalsaha May 17, 2017
f6af56d
added-all
tamalsaha May 17, 2017
8f9e6a3
added-all
tamalsaha May 17, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
7 changes: 5 additions & 2 deletions pkg/controller/ingress/template/template.go
View file
Open in desktop
Expand Up @@ -93,7 +93,10 @@ backend default-backend
{% if HttpsService %}
# https service
frontend https-frontend
bind *:443 ssl no-sslv3 no-tlsv10 crt /etc/ssl/private/haproxy/ alpn http/1.1
bind *:443 ssl no-sslv3 no-tlsv10 no-tls-tickets crt /etc/ssl/private/haproxy/ alpn http/1.1
# Mark all cookies as secure
rsprep ^Set-Cookie:\ (.*) Set-Cookie:\ \1;\ Secure
# Add the HSTS header with a 6 month max-age
rspadd Strict-Transport-Security:\ max-age=15768000

mode http
Expand Down Expand Up @@ -175,7 +178,7 @@ backend http-{{ svc.Name }}
# tcp service
{% for svc in TCPService %}
frontend tcp-frontend-key-{{ svc.Port }}
bind *:{{ svc.Port }} {% if svc.SecretName %}ssl no-sslv3 no-tlsv10 crt /etc/ssl/private/haproxy/{{ svc.SecretName }}.pem{% endif %} {%if svc.ALPNOptions %} {{svc.ALPNOptions}}{% endif %}
bind *:{{ svc.Port }} {% if svc.SecretName %}ssl no-sslv3 no-tlsv10 no-tls-tickets crt /etc/ssl/private/haproxy/{{ svc.SecretName }}.pem{% endif %} {%if svc.ALPNOptions %} {{svc.ALPNOptions}}{% endif %}
mode tcp
default_backend tcp-{{ svc.Name }}
{% endfor %}
Expand Down