From 9dc805c78032feb88b71fd32ed297b484e15ea5b Mon Sep 17 00:00:00 2001
From: Evgeni Golov <evgeni@golov.de>
Date: Thu, 28 Nov 2024 10:34:21 +0100
Subject: [PATCH] force SSL for web

---
 ansible/fastly.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ansible/fastly.yml b/ansible/fastly.yml
index 78c3c7791..64384ebd7 100644
--- a/ansible/fastly.yml
+++ b/ansible/fastly.yml
@@ -39,6 +39,7 @@
             src: resp.http.Location
             substitution: "{{ domains[0].name }}"
             type: response
+        request_settings: "{{ item.request_settings | default(omit) }}"
       vars:
         domains: "{{ item.domains | default([{'name': item.service ~ '.theforeman.org'}]) }}"
       with_items:
@@ -60,3 +61,6 @@
           domains:
             - name: theforeman.org
             - name: www.theforeman.org
+          request_settings:
+            - name: force TLS
+              force_ssl: 1