Skip to content

feat: Add option to enable hsts header #6147

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 11 commits into from
Feb 10, 2023
Merged

feat: Add option to enable hsts header #6147

Changes from 1 commit
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
643f42a
feat: Add option to enable hsts header
Emyrk Feb 10, 2023
bc89288
Import sorting
Emyrk Feb 10, 2023
f216054
Make gen
Emyrk Feb 10, 2023
5e0a232
Actually use the right handler
Emyrk Feb 10, 2023
6389727
Add parallel unit test
Emyrk Feb 10, 2023
8221ab0
make gen
Emyrk Feb 10, 2023
ac1fd5c
Verify hsts options earlier
Emyrk Feb 10, 2023
8f15025
Clarity of what the value is
Emyrk Feb 10, 2023
602aa8f
Fix syntax
Emyrk Feb 10, 2023
895fece
Make gen to update msg
Emyrk Feb 10, 2023
c3c822c
Update golden files
Emyrk Feb 10, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Make gen to update msg
  • Loading branch information
@Emyrk
Emyrk committed Feb 10, 2023
commit 895feced04ec4eef2735e0d9fa65f5814e2922b5
2 changes: 1 addition & 1 deletion docs/cli/coder_server.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,7 @@ coder server [flags]
Consumes $CODER_MAX_SESSION_EXPIRY (default 24h0m0s)
--ssh-keygen-algorithm string The algorithm to use for generating ssh keys. Accepted values are "ed25519", "ecdsa", or "rsa4096".
Consumes $CODER_SSH_KEYGEN_ALGORITHM (default "ed25519")
--strict-transport-security int Controls if the 'Strict-Transport-Security' header is set on all static file responses. This header should only be set if the server is accessed via HTTPS. The value should be a whole number in seconds.
--strict-transport-security int Controls if the 'Strict-Transport-Security' header is set on all static file responses. This header should only be set if the server is accessed via HTTPS. This value is the MaxAge in seconds of the header.
Consumes $CODER_STRICT_TRANSPORT_SECURITY
--strict-transport-security-options strings Two optional fields can be set in the Strict-Transport-Security header; 'includeSubDomains' and 'preload'. The 'strict-transport-security' flag must be set to a non-zero value for these options to be used.
Consumes $CODER_STRICT_TRANSPORT_SECURITY_OPTIONS
Expand Down