4 Commits

Author	SHA1	Message	Date
Ryan Petrello	75a72637dd	allow data: images in our Content Security Policy ... support for custom login logos relies on data:image/*;base64 see: https://github.com/ansible/awx/issues/4253	2019-07-02 11:35:56 -04:00
Ryan Petrello	eacf819caf	add a reasonable default Content Security Policy ... ideally we'd improve this over time to remove the `unsafe-inline` lines, but we can't due that today because Angular1 makes use of a lot of inline <script> and <style> tag generation see: https://github.com/ansible/awx/issues/2056	2019-06-26 10:46:26 -04:00
Jeff Byrnes	7b636a7566	Set up HTTPS w/ proper port & HTTP redirect ... HTTPS is, by default, expected to be on port 443. Also, with HSTS set, we need to be sure that users attempting to arrive via HTTP are properly redirected to HTTPS. This does so by: * Setting up a 301 redirect for any URL to its HTTPS version * Adjusting the internal port for HTTPS traffic to 8053 * Setting docker-compose to share port 443 → 8053 - This is configurable via an inventory variable	2019-04-05 16:13:23 -04:00
Markus Opahle	ed568f569c	only use ssl if certificate is specified ... Signed-off-by: Markus Opahle <3225748+mopahle@users.noreply.github.com>	2019-02-28 14:06:59 +01:00