Enable HSTS for all nginx served SSL sites

[chef.git] / cookbooks / tilecache / templates / default / nginx_generate_tilecache_qos_map.erb

diff --git a/cookbooks/tilecache/templates/default/nginx_generate_tilecache_qos_map.erb b/cookbooks/tilecache/templates/default/nginx_generate_tilecache_qos_map.erb
index 279d67e98c4b774ae9527413d8815d693b874f02..9c6816071e6fd3e9180998c9e7f79be458c1832d 100755 (executable)
--- a/cookbooks/tilecache/templates/default/nginx_generate_tilecache_qos_map.erb
+++ b/cookbooks/tilecache/templates/default/nginx_generate_tilecache_qos_map.erb
@@ -42,8 +42,9 @@ EOF
 cat <<EOF >/etc/nginx/conf.d/tile_qos_cookies.map
 default 'qos_token=${QOS_TOKEN_DEFAULT}; Max-Age=${VALID_TOKEN}; Domain=openstreetmap.org; Path=/'; # Cookie Domain per RFC6265
 "${QOS_TOKEN_DEFAULT}" ''; # Do not Set-Cookie. # Default
+"${QOS_TOKEN_OSM_STALE}" ''; # Do not Set-Cookie. # Exclusive Stale
 "${QOS_TOKEN_OSM}" ''; # Do not Set-Cookie. # Exclusive
 EOF
 
 # Check config, reload config and fail safe
-/etc/init.d/nginx configtest && /bin/systemctl try-reload-or-restart nginx
+/etc/init.d/nginx configtest 2>/dev/null && /bin/systemctl try-reload-or-restart nginx