+ remove include sub domains from hsts policy

5 months ago · 7f393e79d7
1 changed files with 6 additions and 0 deletions
--- a/playbooks/debops/apache.yml
+++ b/playbooks/debops/apache.yml
@ -59,6 +59,12 @@
        tasks_from: 'main_env'
      tags: [ 'role::apache', 'role::apache:env' ]

+  post_tasks:
+
+    - name: Remove include subdomains for HSTS policy
+      shell: |-
+        sed -i '/; includeSubDomains/d' etc/apache2/sites-available/000-default.conf
+
  roles:

    - role: apache