Update security.conf to version from jessie, but keep ServerTokens at ProductOnly

[dsa-puppet.git] / modules / apache2 / files / puppet-ssl-macros

diff --git a/modules/apache2/files/puppet-ssl-macros b/modules/apache2/files/puppet-ssl-macros
index db298bb584943912d5ae56849159893b92576891..c56dd006017efc209168a8d013698697870f7084 100644 (file)
--- a/modules/apache2/files/puppet-ssl-macros
+++ b/modules/apache2/files/puppet-ssl-macros
@@ -3,7 +3,7 @@
     <Macro common-ssl-HSTS>
       <IfModule mod_headers.c>
         # Add two month HSTS header
-        Header always add Strict-Transport-Security "max-age=5184000"
+        Header always add Strict-Transport-Security "max-age=15552000"
       </IfModule>
     </Macro>