change the stash persistent volume location, and force https (hsts

2023-04-06 22:47:53 -04:00
parent 14a0de3d33
commit 1377fa34d1
4 changed files with 22 additions and 2 deletions
--- a/ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml
+++ b/ansible-5/roles/prod.k3s/files/stash/proxy-values.yaml
@@ -28,3 +28,6 @@ ingress:
  # Warning! The configuration is dependant on your current k8s API version capabilities (networking.k8s.io/v1)
  tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames
    - secretName: xai-corp-production-tls
+  annotations:
+    ingress.kubernetes.io/force-hsts: "true"
+    ingress.kubernetes.io/hsts-max-age: "315360000"