add cache headers to security

[dsa-puppet.git] / modules / roles / files / security_mirror / security.debian.org

diff --git a/modules/roles/files/security_mirror/security.debian.org b/modules/roles/files/security_mirror/security.debian.org
index d3d3f14f1e8ff9ea94a7ccd48f53eb429e09b67c..70cc44f2e846652edf308188a78bbca4972c11e3 100644 (file)
--- a/modules/roles/files/security_mirror/security.debian.org
+++ b/modules/roles/files/security_mirror/security.debian.org
@@ -23,8 +23,18 @@
    ServerAlias security-nagios.debian.org
    ServerAlias security-fastly.debian.org
 
+   ExpiresActive On
+   ExpiresDefault "access plus 2 minutes"
+
    Alias /debian-security /org/security.debian.org/ftp
 
+   <Directory /org/security.debian.org/ftp/pool>
+       <FilesMatch "\.(bz2|gz|deb|dsc|xz)$">
+           ExpiresDefault "access plus 1 month"
+           Header append Cache-Control "public"
+       </FilesMatch>
+   </Directory>
+
    RewriteEngine on
    RewriteRule ^/$      http://www.debian.org/security/