Change Details

Leveraging the fact that WMF canonical domains are on the HSTS preload list, we don't need to listen on port 80, as every request even http:// ones should reach the servers via https thanks to HSTS. The first step will be to replace the current redirect from http to https with a simple 403, on a second stage we will disable port 80 completely.

Leveraging the fact that WMF canonical domains are on the HSTS preload list, we don't need to listen on port 80, as every request even http:// ones should reach the servers via https thanks to HSTS. The first step will be to replace the current redirect from http to https with a simple 403, on a second stage we will disable port 80 completely. Sites: [] apt.wikimedia.org [] icinga.wikimedia.org [] dumps.wikimedia.org [] gerrit.wikimedia.org [] gitlab.wikimedia.org [x] librenms.wikimedia.org [] lists.wikimedia.org [] mirrors.wikimedia.org [x] orchestrator.wikimedia.org

Leveraging the fact that WMF canonical domains are on the HSTS preload list, we don't need to listen on port 80, as every request even http:// ones should reach the servers via https thanks to HSTS. The first step will be to replace the current redirect from http to https with a simple 403, on a second stage we will disable port 80 completely. Sites: [] apt.wikimedia.org [] icinga.wikimedia.org [] dumps.wikimedia.org [] gerrit.wikimedia.org [] gitlab.wikimedia.org [x] librenms.wikimedia.org [] lists.wikimedia.org [] mirrors.wikimedia.org [x] orchestrator.wikimedia.org