99 commits

Author	SHA1	Message	Date
Alexandre Aubin	22b9565eb7	Forgot to check that these headers are different from the default in security.conf ... maybe we want to keep them as is? Not clear why they have different values tan the domain configs...	2020-04-06 16:56:53 +02:00
Alexandre Aubin	4d99cbe870	Add ref for security headers	2020-04-06 16:55:20 +02:00
Alexandre Aubin	128577686a	Forgot to make yunohost_admin.conf to also use the common securit.conf.inc	2020-04-03 03:09:46 +02:00
pitchum	5e6e53142b	Improve nginx config for xmpp-upload subdomain.	2020-03-25 12:09:53 +01:00
pitchum	1f09abfa51	Rationalize some nginx config into security.conf.inc.	2020-03-25 11:51:57 +01:00
Alexandre Aubin	af415e38e6	Factorize ciphers and headers configuration into a common file for all vhosts	2020-03-23 22:43:29 +01:00
Alexandre Aubin	27f6899b65	/var/www/xmpp-upload.{domain} -> /var/xmpp-upload/{domain}	2020-03-23 22:15:03 +01:00
pitchum	994f0ca1ef	nginx + metronome config for http_upload	2020-03-22 08:36:33 +01:00
Alexandre Aubin	f050b3c5b8	First version of http exposure diagnosis	2019-10-10 16:13:13 +02:00
Alexandre Aubin	9b3c97000d	Merge pull request #701 from kay0u/patch-5 ... [enh] WebSocket proxying	2019-04-25 13:51:53 +02:00
Alexandre Aubin	1fc9f7ddad	Fix yunohost_admin.conf initialization	2019-04-11 14:27:09 +02:00
Kayou	e9d399f7cd	Format	2019-04-04 12:29:23 +02:00
Kayou	1a1fc0bdff	Add connection_upgrade	2019-04-04 12:28:00 +02:00
Alexandre Aubin	bdc78530cf	Merge pull request #689 from YunoHost/tweaks_for_theme ... [enh] Nginx conf tweaks for theme	2019-04-01 02:50:44 +02:00
Alexandre Aubin	dbafa47f88	Merge branch 'stretch-unstable' into featureCipherStrategy	2019-03-23 18:19:04 +01:00
Alexandre Aubin	dcff10f6f8	Simplify setting usage in regenconf hooks	2019-03-22 16:31:45 +01:00
ljf (zamentur)	c8d8e0e272	[fix] Avoid potential conflict with some apps	2019-03-22 16:30:02 +01:00
ljf (zamentur)	2defd6ffa8	[fix] Keep user info in json format ... Previously it was ynhpanel.json	2019-03-22 16:20:35 +01:00
Alexandre Aubin	b99b22bb03	Propagate file renaming for semantic	2019-03-19 01:17:45 +01:00
Alexandre Aubin	3af3c2b779	Directly inject standard css + custom css and js	2019-03-18 19:37:52 +01:00
Alexandre Aubin	a8f88e7232	[yolo] gzip off in global.conf breaks everything because conflict with gzip on; in nginx.conf ... Moving it to server blocs	2019-03-13 19:11:49 +01:00
Alexandre Aubin	2818abe500	Update global.conf	2019-03-09 16:45:53 +01:00
Alexandre Aubin	a1d85b6350	Merge branch 'stretch-unstable' into featureCipherStrategy	2019-02-25 00:56:20 +01:00
Alexandre Aubin	198919adc8	Don't add Strict-Transport-Security header in nginx conf if using a self-signed cert	2019-02-22 16:24:19 +01:00
Alexandre Aubin	8f50bdeb28	Merge pull request #622 from ABLD/frju365-patch2 ... Improve protection against indexation from the robots.	2019-02-19 17:09:09 +01:00
Romuald du Song	5d48640f3c	Adapt comment to new context	2019-02-14 23:12:59 +01:00
Romuald du Song	e9274ee443	Handle yunohost admin nginx config	2019-02-14 22:27:49 +01:00
Romuald du Song	7b01ccfefb	remove whitespace control attempt	2019-02-14 21:33:36 +01:00
Romuald du Song	a267e1bc74	what a cumbersome whitespace control	2019-02-14 21:28:56 +01:00
Romuald du Song	3251189ab8	what a cumbersome whitespace control	2019-02-14 21:26:25 +01:00
Romuald du Song	e776c777e6	remove strip whitespace syntax	2019-02-14 21:17:58 +01:00
Romuald du Song	8e1034771a	use setting security_ciphers_compatibility to define security configurations	2019-02-04 23:01:16 +01:00
Alexandre Aubin	4a7e33a145	#564 broke the autoconfig, nginx was lookin for mailconfig.xml instead of main/config.xml	2019-01-30 17:34:51 +01:00
frju365	7b70305448	Update yunohost_admin.conf	2019-01-26 23:51:22 +01:00
Alexandre Aubin	8ec7d361a4	Old comment from when http2 was disabled	2019-01-26 20:11:17 +01:00
frju365	a42df2d8fe	Update yunohost_admin.conf	2019-01-21 21:39:07 +01:00
frju365	08869c329c	Update yunohost_admin.conf	2019-01-21 21:17:33 +01:00
Alexandre Aubin	bd0eef1b36	Remove old comment about jessie	2019-01-18 17:54:26 +01:00
frju365	2e460cb4d6	Update yunohost_admin.conf	2019-01-18 17:31:28 +01:00
frju365	8cb029a55e	Better Configuration of nginx (#564) ... * path-traversal * [fix] try a patch for path-traversal * Use more_set_headers insta	2018-11-28 01:21:28 +01:00
liberodark	1906692289	Remove ECDH curve or change it ? (#579) ... Update ECDH curves recommended by Mozilla, now that we are on stretch	2018-11-27 18:30:39 +01:00
liberodark	76121ea084	HTTP2 On (#580) ... * HTTP2 On for better security * Remove old lines	2018-11-27 18:27:01 +01:00
frju365	d77b157bcc	[enh] Set Path as full-path (#563) ... * [fix] Set Path as full-path * same * Update yunohost_admin.conf	2018-10-27 17:47:12 +02:00
frju365	fa66a7b8c7	OCSP Stapling (#533) ... * [enh] Jinja templating * [enh] try to enable OCSP * typo * [mod] use jq (json parsing) * typo * well escaping "" :) * [fix] if 2d part condition * We need to include this for ynh_render_template to be available >.> ... * Simplify code * Gotta export domain too... * Remove quotes in variable itself.. * Replace previous code blocks by new code	2018-10-27 16:38:25 +02:00
Gabriel Corona	8691017b46	Pass Host header to YunoHost API ... This is useful to validate Origin/Referer headers in order to prevent CSRF.	2018-10-24 19:44:24 +00:00
pitchum	a7e85dbbba	[enh] Add MUA autoconfig.	2018-06-25 09:45:13 +02:00
Alexandre Aubin	dd8af083b3	Merge branch 'unstable' into stretch-unstable	2018-05-20 21:43:05 +02:00
Alexandre Aubin	c75a3f1b44	Also disabling httpt2 in yunohost_admin.conf	2018-05-08 05:50:39 +02:00
Alexandre Aubin	3feae2e877	Some ecdh_curve don't work on jessie	2018-05-02 19:48:36 +02:00
Alexandre Aubin	25bd5648a7	Disabling http2 for now as it's causing weird issues with curl	2018-05-02 18:16:08 +02:00