sameersbn / sameersbn/docker-gitlab
The NGINX_HSTS_ENABLED setting is not valid for Pages
Open
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 8.1k
- Forks
- 2.1k
- Avg merge
- 17h 47m
- Merged PRs (30d)
- 7
Description
Pages could not turn on HTTP Strict Transport Security for NGINX.
Modifying NGINX_HSTS_ENABLED doesn't seem to work for Pages.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the NGINX_HSTS_ENABLED setting through the Dockerized GitLab configuration and the Pages setup; the payload does not name a file or test. Reproduce the Pages deployment behavior, identify why the setting is ignored, and verify that HTTP Strict Transport Security can be enabled for Pages.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, nginx, shell
- Domain
- devops, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100