1[%# This Source Code Form is subject to the terms of the Mozilla Public 2 # License, v. 2.0. If a copy of the MPL was not distributed with this 3 # file, You can obtain one at http://mozilla.org/MPL/2.0/. 4 # 5 # This Source Code Form is "Incompatible With Secondary Licenses", as 6 # defined by the Mozilla Public License, v. 2.0. 7 #%] 8 9[% 10 title = "Advanced" 11 desc = "Settings for advanced configurations." 12%] 13 14[% sts_desc = BLOCK %] 15 Enables the sending of the 16 <a href="http://en.wikipedia.org/wiki/Strict_Transport_Security">Strict-Transport-Security</a> 17 header along with HTTP responses on SSL connections. This adds greater 18 security to your SSL connections by forcing the browser to always 19 access your domain over SSL and never accept an invalid certificate. 20 However, it should only be used if you have the <code>ssl_redirect</code> 21 parameter turned on, [% terms.Bugzilla %] is the only thing running 22 on its domain (i.e., your <code>urlbase</code> is something like 23 <code>http://bugzilla.example.com/</code>), and you never plan to disable 24 the <code>ssl_redirect</code> parameter. 25 <ul> 26 <li> 27 off - Don't send the Strict-Transport-Security header with requests. 28 </li> 29 <li> 30 this_domain_only - Send the Strict-Transport-Security header with all 31 requests, but only support it for the current domain. 32 </li> 33 <li> 34 include_subdomains - Send the Strict-Transport-Security header along 35 with the <code>includeSubDomains</code> flag, which will apply the 36 security change to all subdomains. This is especially useful when 37 combined with an <code>attachment_base</code> that exists as (a) 38 subdomain(s) under the main [% terms.Bugzilla %] domain. 39 </li> 40 </ul> 41[% END %] 42 43[% param_descs = { 44 cookiedomain => 45 "If your website is at 'www.foo.com', setting this to" 46 _ " '.foo.com' will also allow 'bar.foo.com' to access" 47 _ " $terms.Bugzilla cookies. This is useful if you have more than" 48 _ " one hostname pointing at the same web server, and you" 49 _ " want them to share the $terms.Bugzilla cookie.", 50 51 inbound_proxies => 52 "When inbound traffic to $terms.Bugzilla goes through a proxy," 53 _ " $terms.Bugzilla thinks that the IP address of every single" 54 _ " user is the IP address of the proxy. If you enter a comma-separated" 55 _ " list of IPs in this parameter, then $terms.Bugzilla will trust any" 56 _ " <code>X-Forwarded-For</code> header sent from those IPs," 57 _ " and use the value of that header as the end user's IP address.", 58 59 proxy_url => 60 "$terms.Bugzilla may have to access the web to get notifications about" 61 _ " new releases (see the <tt>upgrade_notification</tt> parameter)." 62 _ " If your $terms.Bugzilla server is behind a proxy, it may be" 63 _ " necessary to enter its URL if the web server cannot access the" 64 _ " HTTP_PROXY environment variable. If you have to authenticate," 65 _ " use the <code>http://user:pass@proxy_url/</code> syntax.", 66 67 strict_transport_security => sts_desc, 68} %] 69