1363917 - Enable HSTS on reviewboard-hg.mozilla.org

Status: RESOLVED FIXED

(MozReview Graveyard :: Infrastructure, enhancement)

Description

[Gregory Szorc [:gps]]

Let's enable HSTS on reviewboard-hg.mozilla.org similar to what we did on hg.mozilla.org.

Comment 1

[Gregory Szorc [:gps]]

Attachment: ansible/hg-reviewboard: enable HSTS on reviewboard-hg (bug 1363917);

This boilerplate is copied from the hgweb ansible playbook. At some
point we should consolidate the playbooks. I don't care enough to do it
right now.

Like with hg.mo, we start off with a low HSTS value of 5 minutes in case
we need to roll it back. On hg.mo, we ramped up to 1 hour, 1 day,
then 1 year. We'll likely do the same here.

Review commit: https://reviewboard.mozilla.org/r/138190/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/138190/

Comment 2

[Kendall Libby [:fubar] (he/him)]

Comment on attachment 8866584 [details]
ansible/hg-reviewboard: enable HSTS on reviewboard-hg (bug 1363917);

https://reviewboard.mozilla.org/r/138190/#review141554

Comment 3

[Gregory Szorc [:gps]]

needinfo me so I remember to deploy this (since I'm not going to roll this out on a Friday afternoon).

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/hgcustom/version-control-tools/rev/887623043e78
ansible/hg-reviewboard: enable HSTS on reviewboard-hg ; r=fubar

Comment 5

[Gregory Szorc [:gps]]

This is deployed. Will file a follow-up to ramp up the value.