Alexandre Aubin
4769242dc5
Yolodraft: handle metronome as an app
2024-05-11 14:50:46 +02:00
Alexandre Aubin
f248086fb6
nginx: nevermind applogos caching, nowadays nginx/browsers automatically cache static assets with etags etc ?
2024-02-03 20:28:41 +01:00
Alexandre Aubin
41da1daf02
nginx: remove old 'yunohost_panel.conf' stuff
2024-02-03 18:39:25 +01:00
Alexandre Aubin
98701ebdab
regenconf: the 'plain' subfolder thing for nginx conf is annoying, flatten things up
2024-02-03 18:36:55 +01:00
Alexandre Aubin
ca835534de
portal: serve app logos from an sso-specific route (to keep separation of concern etc)
2024-02-03 18:24:31 +01:00
Alexandre Aubin
69cc6345a5
webadmin: add cache config for app logos
2024-02-03 18:21:02 +01:00
Alexandre Aubin
db30b3acb8
Merge branch 'bookworm' into portal-api
2023-09-27 18:57:02 +02:00
selfhoster1312
26d4d9420c
Allow inline scripts for yunohost-portal (nginx CSP)
2023-08-15 14:12:08 +02:00
Alexandre Aubin
afd7b37ebc
Tweak nginx portal conf to serve html/css/js/assets from /usr/share/yunohost/portal, similar to webadmin
2023-07-30 23:53:43 +02:00
Alexandre Aubin
09c5a4cfb9
admin and portalapi: propagate new configurable CORS mechanism from moulinette
2023-07-29 19:15:30 +02:00
Alexandre Aubin
f69f87fa65
Merge remote-tracking branch 'origin/dev' into portal-api
2023-07-17 18:56:05 +02:00
Alexandre Aubin
f4dfb56006
portal refactoring: the 'yunohost tile' thingy won't work anymore, gotta discuss what we want to do exactly
2023-07-15 16:01:03 +02:00
Alexandre Aubin
0cb673c125
portalapi: woopsies
2023-07-14 19:35:05 +02:00
Alexandre Aubin
5104c2a79f
portalapi: add CORS headers ... though gotta revisit this later, I don't know what I'm doing
2023-07-14 19:11:32 +02:00
Alexandre Aubin
a1cf770e1b
Merge branch 'dev' into portal-api
2023-07-11 17:11:02 +02:00
Alexandre Aubin
7ba6c37eb8
Merge branch '11.2' into bookworm
2023-07-11 15:56:52 +02:00
Alexandre Aubin
6b24412910
Merge pull request #1534 from YunoHost/fix-ocsp-stapling
...
Fix OCSP stapling ... but using tech giant resolvers :|
2023-07-10 19:12:19 +02:00
Alexandre Aubin
c0c0fcaf54
ocsp stapling: Use 1.1.1.1 and 9.9.9.9 instead of 8.8.8.8
2023-07-10 19:10:54 +02:00
Alexandre Aubin
bdc296f858
Merge remote-tracking branch 'origin/dev' into bookworm
2023-07-04 18:10:25 +02:00
Alexandre Aubin
3957b10e92
nginx: replace $http_host by $host, cf https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md / Credit to A.Wolski
2023-07-04 15:00:02 +02:00
Alexandre Aubin
194eb9c6c7
conf: Update ciphers for nginx, postfix, dovecot
2023-06-13 20:39:56 +02:00
Alexandre Aubin
d42c99835a
nginx: use /var/www/.well-known folder for ynh diagnosis and acme challenge, because /tmp/ could be manipulated by user to serve maliciously crafted files
2023-06-09 22:30:32 +02:00
Yann Autissier
e8dd243218
update Content-Security-Policy header for chromium
...
Chromium fails to load a jitsi video conference, refusing to create a
worker because it violates the Content Security Policy directive:
"script-src https: data: 'unsafe-inline' 'unsafe-eval'".
2023-05-19 20:39:29 +00:00
Alexandre Aubin
e458d8813e
nginx/security: fix empty webadmin allowlist breaking nginx conf...
2023-02-26 15:11:18 +01:00
Kayou
c444dee4fe
add xmpp-upload. and muc. server_name only if xmpp_enabled is enabled
2023-01-23 15:18:44 +01:00
Alexandre Aubin
e9b5ec90a4
Yoloimplementation of app logo support (require change in app catalog build)
2023-01-03 00:46:14 +01:00
Alexandre Aubin
a5a2a15351
Merge branch 'dev_on_muc' of github.com:larchange/yunohost into larchange-dev_on_muc
2022-11-27 03:02:42 +01:00
Alexandre Aubin
867632d355
domains: propagate mail/xmpp enable/disable toggle to actual system configurations
2022-11-27 02:54:35 +01:00
Alexandre Aubin
dc5fbd5555
Fix OCSP stapling ... but using Google resolver :|
2022-11-26 23:47:50 +01:00
Alexandre Aubin
afdc2ad5b4
nginx: fix broken postinstall, yunohost_http_errors.conf.inc was not actually copied to /etc/nginx/conf.d. Moving to plain/ subfolder where all files in this folder are copied during nginx regenconf
2022-11-19 20:20:26 +01:00
tituspijean
5063e12835
Add 502 custom error page ( #1530 )
2022-11-14 23:24:08 +01:00
Alexandre Aubin
47543b19b7
configpanels: Iterating on action POC to create a certificat section in domain config panels
2022-09-30 15:03:03 +02:00
Alexandre Aubin
1246fcf8f6
nginx: I'm tired of people reporting the 'Report-Only' error message they see in the console. This is useless. Just get rid of it.
2022-08-14 18:56:20 +02:00
Alexandre Aubin
58ffff556c
Merge remote-tracking branch 'origin/dev' into portal-api
2022-08-09 18:22:32 +02:00
Keoma Brun
b32bc3a034
Content Security Policies Report and Websockets
...
Add the `wss:` field so that Nginx does not create warning when using Websocket over TLS.
This modification only affects the `Report-Only` part of the CSP, that takes care of creating warnings in the logs.
Warning ex (fr only sorry):
```
Content Security Policy: Les paramètres de la page ont empêché le chargement d’une ressource à wss://your.website.tld (« default-src »). Un rapport CSP est en cours d’envoi.
```
2022-05-15 18:33:44 +02:00
Alexandre Aubin
1efb50c7ab
Iterate on new portal API design: nginx config, cookie format, be able to open a non-root ldap session,
2021-12-25 15:44:14 +01:00
Alexandre Aubin
05f25fa85f
Propagate dir structure change to scripts etc
2021-11-10 18:25:37 +01:00
Alexandre Aubin
5de9e4fe6a
Yolorework the repo dir structure
2021-11-10 17:56:02 +01:00
