about summary refs log tree commit diff
path: root/ops
diff options
context:
space:
mode:
authorFlorian Klink <flokli@flokli.de>2024-02-23T18·41+0700
committerclbot <clbot@tvl.fyi>2024-02-23T18·50+0000
commit515d93380866c83af474918a3243fdc716d4f15d (patch)
tree6c6e0036add96bbd787ffc8e1363470630581ed1 /ops
parentf3faeae52aae8a3ab9cd0aee2c2a2ef9c904e483 (diff)
feat(ops/modules/www): drop hsts for .dev r/7599
The .dev TLS is on the HSTS preload list, so there's no need to set this
header here at all.

Change-Id: I253fa2427e75bd0808945cd5d53159cac74e7f8b
Reviewed-on: https://cl.tvl.fyi/c/depot/+/11018
Autosubmit: flokli <flokli@flokli.de>
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
Diffstat (limited to 'ops')
-rw-r--r--ops/modules/www/tvix.dev.nix10
1 files changed, 0 insertions, 10 deletions
diff --git a/ops/modules/www/tvix.dev.nix b/ops/modules/www/tvix.dev.nix
index 33c0bb002c..f884bc30ed 100644
--- a/ops/modules/www/tvix.dev.nix
+++ b/ops/modules/www/tvix.dev.nix
@@ -11,20 +11,12 @@
       enableACME = true;
       forceSSL = true;
       root = depot.tvix.website;
-
-      extraConfig = ''
-        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
-      '';
     };
 
     services.nginx.virtualHosts."bolt.tvix.dev" = {
       root = depot.web.tvixbolt;
       enableACME = true;
       forceSSL = true;
-
-      extraConfig = ''
-        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
-      '';
     };
 
     # old domain, serve redirect
@@ -40,8 +32,6 @@
       forceSSL = true;
 
       extraConfig = ''
-        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
-
         location = / {
           # until we have a better default page here
           return 301 https://docs.tvix.dev/rust/tvix_eval/index.html;