Alexandre Aubin
|
c5d06af20e
|
Guess what ... If people manually tweaked their nginx.conf to enable gzip globally, this will break cert renewal ..
|
2020-12-11 20:40:45 +01:00 |
|
Alexandre Aubin
|
ba884d5b6d
|
Get rid of yunohost.local in main domain nginx conf ... because this interfer with using yunohost.local for postinstall. Just let it be handled by the default vhost
|
2020-10-03 16:32:31 +02:00 |
|
Alexandre Aubin
|
cc4db7a6f6
|
Add a comment explaining why the location is empty
|
2020-09-03 23:47:24 +02:00 |
|
ljf
|
f92b84bd94
|
[fix] SSO unavailable
|
2020-09-03 22:27:46 +02:00 |
|
Alexandre Aubin
|
f3a4334a13
|
Upgrade nginx configuration according to Mozilla guidelines now that we're on Buster
|
2020-08-14 14:50:54 +02:00 |
|
Alexandre Aubin
|
8911499bf3
|
Merge pull request #1026 from YunoHost/remove-useless-robots-protection
Remove useless robot protection code
|
2020-07-05 02:52:23 +02:00 |
|
Alexandre Aubin
|
ac9182d69f
|
Move redirect to /yunohost/admin to a separate nginx conf file to allow customizing it more easily
|
2020-06-25 21:42:46 +02:00 |
|
Alexandre Aubin
|
f1bfc521ae
|
Allow to extend the nginx default_server configuration
|
2020-06-25 20:04:11 +02:00 |
|
Alexandre Aubin
|
74ef4d1cf7
|
Remove useless robot protection code
|
2020-06-25 19:46:22 +02:00 |
|
Alexandre Aubin
|
203bc01e0c
|
Merge pull request #1007 from SohKa/add-predefined-dh-group
Add pre-defined DHE group and set up Nginx to use it
|
2020-06-04 18:51:53 +02:00 |
|
Alexandre Aubin
|
1cfa815aaa
|
Propagate location change for ffdhe2048.pem
|
2020-06-04 18:44:02 +02:00 |
|
Alexandre Aubin
|
9906617aa1
|
Add comments about where the DH param comes from
|
2020-06-04 18:41:05 +02:00 |
|
Alexandre Aubin
|
b3db4d92fc
|
Bump server_names_hash_bucket_size to 128 to avoid nginx exploding for stupid reasons
|
2020-05-27 17:10:39 +02:00 |
|
SohKa
|
d4bea7dd34
|
Add pre-defined DHE group and set up Nginx to use it
|
2020-05-26 19:17:03 +02:00 |
|
Alexandre Aubin
|
0fba21f924
|
Enforce CSP rules for real on webadmin
|
2020-04-29 01:07:07 +02:00 |
|
Alexandre Aubin
|
c0c026613f
|
Add wss: to default to get rid of angry CSP on webadmin
|
2020-04-27 02:15:14 +02:00 |
|
Alexandre Aubin
|
194a0bb187
|
We need that trailing / for the download of files to actually work, c.f. feedback in 3.8 post on the forum
|
2020-04-21 15:46:03 +02:00 |
|
Kayou
|
9af942afa0
|
Merge pull request #925 from YunoHost/kay0u-patch-1
[fix] custom_portal and custom_overlay redirect
|
2020-04-18 01:42:58 +02:00 |
|
Alexandre Aubin
|
1e6da91c78
|
Add automail conf for https, + increase priority for automail conf and diagnosis
|
2020-04-11 00:29:49 +02:00 |
|
Kayou
|
887304919e
|
Merge pull request #917 from YunoHost/fix-acme-challenge-snippet
Get rid of domain-specific acme-challenge snippet, use a single snippet included in every conf
|
2020-04-09 21:07:50 +02:00 |
|
Kayou
|
4968f1aa7d
|
[fix] custom_portal and custom_overlay redirect
|
2020-04-09 18:08:51 +02:00 |
|
Alexandre Aubin
|
c06fe42078
|
Hmgn don't change the value for the session cache size otherwise that break test for restore from old version for stupid reasons -.-
|
2020-04-08 21:33:34 +02:00 |
|
Alexandre Aubin
|
71cc4fde97
|
We in fact only have ssl 1.1.0l, not 1.1.1l on Stretch.
|
2020-04-08 19:59:27 +02:00 |
|
Alexandre Aubin
|
f390f02077
|
Update nginx security.conf.inc with new Mozilla recommendation
|
2020-04-08 19:59:27 +02:00 |
|
Alexandre Aubin
|
3a7b93d8aa
|
Get rid of domain-specific acme-challenge snippet, use a single snippet including in every conf
|
2020-04-06 18:09:14 +02:00 |
|
Alexandre Aubin
|
22b9565eb7
|
Forgot to check that these headers are different from the default in security.conf ... maybe we want to keep them as is? Not clear why they have different values tan the domain configs...
|
2020-04-06 16:56:53 +02:00 |
|
Alexandre Aubin
|
4d99cbe870
|
Add ref for security headers
|
2020-04-06 16:55:20 +02:00 |
|
Alexandre Aubin
|
128577686a
|
Forgot to make yunohost_admin.conf to also use the common securit.conf.inc
|
2020-04-03 03:09:46 +02:00 |
|
pitchum
|
5e6e53142b
|
Improve nginx config for xmpp-upload subdomain.
|
2020-03-25 12:09:53 +01:00 |
|
pitchum
|
1f09abfa51
|
Rationalize some nginx config into security.conf.inc.
|
2020-03-25 11:51:57 +01:00 |
|
Alexandre Aubin
|
af415e38e6
|
Factorize ciphers and headers configuration into a common file for all vhosts
|
2020-03-23 22:43:29 +01:00 |
|
Alexandre Aubin
|
27f6899b65
|
/var/www/xmpp-upload.{domain} -> /var/xmpp-upload/{domain}
|
2020-03-23 22:15:03 +01:00 |
|
pitchum
|
994f0ca1ef
|
nginx + metronome config for http_upload
|
2020-03-22 08:36:33 +01:00 |
|
Alexandre Aubin
|
f050b3c5b8
|
First version of http exposure diagnosis
|
2019-10-10 16:13:13 +02:00 |
|
Alexandre Aubin
|
9b3c97000d
|
Merge pull request #701 from kay0u/patch-5
[enh] WebSocket proxying
|
2019-04-25 13:51:53 +02:00 |
|
Alexandre Aubin
|
1fc9f7ddad
|
Fix yunohost_admin.conf initialization
|
2019-04-11 14:27:09 +02:00 |
|
Kayou
|
e9d399f7cd
|
Format
|
2019-04-04 12:29:23 +02:00 |
|
Kayou
|
1a1fc0bdff
|
Add connection_upgrade
|
2019-04-04 12:28:00 +02:00 |
|
Alexandre Aubin
|
bdc78530cf
|
Merge pull request #689 from YunoHost/tweaks_for_theme
[enh] Nginx conf tweaks for theme
|
2019-04-01 02:50:44 +02:00 |
|
Alexandre Aubin
|
dbafa47f88
|
Merge branch 'stretch-unstable' into featureCipherStrategy
|
2019-03-23 18:19:04 +01:00 |
|
Alexandre Aubin
|
dcff10f6f8
|
Simplify setting usage in regenconf hooks
|
2019-03-22 16:31:45 +01:00 |
|
ljf (zamentur)
|
c8d8e0e272
|
[fix] Avoid potential conflict with some apps
|
2019-03-22 16:30:02 +01:00 |
|
ljf (zamentur)
|
2defd6ffa8
|
[fix] Keep user info in json format
Previously it was ynhpanel.json
|
2019-03-22 16:20:35 +01:00 |
|
Alexandre Aubin
|
b99b22bb03
|
Propagate file renaming for semantic
|
2019-03-19 01:17:45 +01:00 |
|
Alexandre Aubin
|
3af3c2b779
|
Directly inject standard css + custom css and js
|
2019-03-18 19:37:52 +01:00 |
|
Alexandre Aubin
|
a8f88e7232
|
[yolo] gzip off in global.conf breaks everything because conflict with gzip on; in nginx.conf ... Moving it to server blocs
|
2019-03-13 19:11:49 +01:00 |
|
Alexandre Aubin
|
2818abe500
|
Update global.conf
|
2019-03-09 16:45:53 +01:00 |
|
Alexandre Aubin
|
a1d85b6350
|
Merge branch 'stretch-unstable' into featureCipherStrategy
|
2019-02-25 00:56:20 +01:00 |
|
Alexandre Aubin
|
198919adc8
|
Don't add Strict-Transport-Security header in nginx conf if using a self-signed cert
|
2019-02-22 16:24:19 +01:00 |
|
Alexandre Aubin
|
8f50bdeb28
|
Merge pull request #622 from ABLD/frju365-patch2
Improve protection against indexation from the robots.
|
2019-02-19 17:09:09 +01:00 |
|