X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Froles%2Ffiles%2Fsecurity_mirror%2Fsecurity.debian.org;h=685162e3881ee86da402ae869c1cc56b8c30d059;hb=682fa61e5816d2cb5aef6ccd90ccefee1cb767d0;hp=d3d3f14f1e8ff9ea94a7ccd48f53eb429e09b67c;hpb=590056fbc3fe2829f5251d158ac8ab67112a2c87;p=dsa-puppet.git

diff --git a/modules/roles/files/security_mirror/security.debian.org b/modules/roles/files/security_mirror/security.debian.org
index d3d3f14f..685162e3 100644
--- a/modules/roles/files/security_mirror/security.debian.org
+++ b/modules/roles/files/security_mirror/security.debian.org
@@ -20,11 +20,28 @@
    ServerAlias security.us.debian.org
    ServerAlias security.na.debian.org
    ServerAlias security.geo.debian.org
+   ServerAlias security-cdn.debian.org
+   ServerAlias security-cdn1.debian.org
+   ServerAlias security-cdn2.debian.org
    ServerAlias security-nagios.debian.org
-   ServerAlias security-fastly.debian.org
+
+   ExpiresActive On
+   ExpiresDefault "access plus 2 minutes"
 
    Alias /debian-security /org/security.debian.org/ftp
 
+   <Directory /org/security.debian.org/ftp/pool>
+      <FilesMatch "\.(bz2|gz|deb|dsc|xz)$">
+         ExpiresDefault "access plus 1 month"
+         Header append Cache-Control "public"
+      </FilesMatch>
+   </Directory>
+
+   <Directory /org/security.debian.org/ftp/dists>
+      ExpiresDefault "access plus 1 seconds"
+      Header append Cache-Control "public"
+   </Directory>
+
    RewriteEngine on
    RewriteRule ^/$      http://www.debian.org/security/
 
@@ -34,6 +51,6 @@
 
    CustomLog /var/log/apache2/security.debian.org-access.log privacy
    ServerSignature On
-
 </VirtualHost>
 
+# vim: set ts=3 sw=3 et: