From: William Pitcock <nenolod@dereferenced.org>
Date: Sun, 11 Nov 2018 06:42:14 +0000 (+0000)
Subject: sample config: document how to make CSPPlug send STS headers (off by default to allow... 
X-Git-Url: https://git.squeep.com/?a=commitdiff_plain;h=a2bf5426cb84940dbd58aec10a7b1b0a90f26a60;p=akkoma

sample config: document how to make CSPPlug send STS headers (off by default to allow for SSL debugging)
---

diff --git a/lib/mix/tasks/sample_config.eex b/lib/mix/tasks/sample_config.eex
index 3881ead26..824bc97a1 100644
--- a/lib/mix/tasks/sample_config.eex
+++ b/lib/mix/tasks/sample_config.eex
@@ -25,6 +25,10 @@ config :pleroma, Pleroma.Repo,
   hostname: "localhost",
   pool_size: 10
 
+# Enable Strict-Transport-Security once SSL is working:
+# config :pleroma, :csp,
+#   sts: true
+
 # Configure S3 support if desired.
 # The public S3 endpoint is different depending on region and provider,
 # consult your S3 provider's documentation for details on what to use.