X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/c249fadcc5ce27698d1f11fe5ec4a1c299786b3c..e1f83766a92d045cc7588b1235a1435ff3d4b752:/cookbooks/web/templates/default/apache.frontend.erb

diff --git a/cookbooks/web/templates/default/apache.frontend.erb b/cookbooks/web/templates/default/apache.frontend.erb
index 2058b7a98..b2bf38a2e 100644
--- a/cookbooks/web/templates/default/apache.frontend.erb
+++ b/cookbooks/web/templates/default/apache.frontend.erb
@@ -17,6 +17,12 @@
   SSLProxyEngine on
   SSLCertificateFile /etc/ssl/certs/www.openstreetmap.org.pem
   SSLCertificateKeyFile /etc/ssl/private/www.openstreetmap.org.key
+
+  #
+  # Disable HSTS for Firefox 52 to avoid issues with remote editing
+  #
+  BrowserMatch Firefox/52 no-hsts
+  Header set Strict-Transport-Security "max-age=0" env=no-hsts
 <% end -%>
 
   #
@@ -302,7 +308,10 @@
   ServerName openstreetmap.org
   ServerAlias *
 
-  RedirectPermanent / https://www.openstreetmap.org/
+  RewriteEngine on
+
+  RewriteCond %{REQUEST_URI} !^/server-status$
+  RewriteRule ^(.*)$ https://www.openstreetmap.org$1 [L,NE,R=permanent]
 </VirtualHost>
 
 <VirtualHost *:443>