Alexandre Aubin
1e6da91c78
Add automail conf for https, + increase priority for automail conf and diagnosis
2020-04-11 00:29:49 +02:00
Kayou
887304919e
Merge pull request #917 from YunoHost/fix-acme-challenge-snippet
...
Get rid of domain-specific acme-challenge snippet, use a single snippet included in every conf
2020-04-09 21:07:50 +02:00
Alexandre Aubin
c06fe42078
Hmgn don't change the value for the session cache size otherwise that break test for restore from old version for stupid reasons -.-
2020-04-08 21:33:34 +02:00
Alexandre Aubin
71cc4fde97
We in fact only have ssl 1.1.0l, not 1.1.1l on Stretch.
2020-04-08 19:59:27 +02:00
Alexandre Aubin
f390f02077
Update nginx security.conf.inc with new Mozilla recommendation
2020-04-08 19:59:27 +02:00
Alexandre Aubin
3a7b93d8aa
Get rid of domain-specific acme-challenge snippet, use a single snippet including in every conf
2020-04-06 18:09:14 +02:00
Alexandre Aubin
22b9565eb7
Forgot to check that these headers are different from the default in security.conf ... maybe we want to keep them as is? Not clear why they have different values tan the domain configs...
2020-04-06 16:56:53 +02:00
Alexandre Aubin
4d99cbe870
Add ref for security headers
2020-04-06 16:55:20 +02:00
Alexandre Aubin
128577686a
Forgot to make yunohost_admin.conf to also use the common securit.conf.inc
2020-04-03 03:09:46 +02:00
pitchum
5e6e53142b
Improve nginx config for xmpp-upload subdomain.
2020-03-25 12:09:53 +01:00
pitchum
1f09abfa51
Rationalize some nginx config into security.conf.inc.
2020-03-25 11:51:57 +01:00
Alexandre Aubin
af415e38e6
Factorize ciphers and headers configuration into a common file for all vhosts
2020-03-23 22:43:29 +01:00
Alexandre Aubin
27f6899b65
/var/www/xmpp-upload.{domain} -> /var/xmpp-upload/{domain}
2020-03-23 22:15:03 +01:00
pitchum
994f0ca1ef
nginx + metronome config for http_upload
2020-03-22 08:36:33 +01:00
Alexandre Aubin
f050b3c5b8
First version of http exposure diagnosis
2019-10-10 16:13:13 +02:00
Alexandre Aubin
9b3c97000d
Merge pull request #701 from kay0u/patch-5
...
[enh] WebSocket proxying
2019-04-25 13:51:53 +02:00
Alexandre Aubin
1fc9f7ddad
Fix yunohost_admin.conf initialization
2019-04-11 14:27:09 +02:00
Kayou
e9d399f7cd
Format
2019-04-04 12:29:23 +02:00
Kayou
1a1fc0bdff
Add connection_upgrade
2019-04-04 12:28:00 +02:00
Alexandre Aubin
bdc78530cf
Merge pull request #689 from YunoHost/tweaks_for_theme
...
[enh] Nginx conf tweaks for theme
2019-04-01 02:50:44 +02:00
Alexandre Aubin
dbafa47f88
Merge branch 'stretch-unstable' into featureCipherStrategy
2019-03-23 18:19:04 +01:00
Alexandre Aubin
dcff10f6f8
Simplify setting usage in regenconf hooks
2019-03-22 16:31:45 +01:00
ljf (zamentur)
c8d8e0e272
[fix] Avoid potential conflict with some apps
2019-03-22 16:30:02 +01:00
ljf (zamentur)
2defd6ffa8
[fix] Keep user info in json format
...
Previously it was ynhpanel.json
2019-03-22 16:20:35 +01:00
Alexandre Aubin
b99b22bb03
Propagate file renaming for semantic
2019-03-19 01:17:45 +01:00
Alexandre Aubin
3af3c2b779
Directly inject standard css + custom css and js
2019-03-18 19:37:52 +01:00
Alexandre Aubin
a8f88e7232
[yolo] gzip off in global.conf breaks everything because conflict with gzip on; in nginx.conf ... Moving it to server blocs
2019-03-13 19:11:49 +01:00
Alexandre Aubin
2818abe500
Update global.conf
2019-03-09 16:45:53 +01:00
Alexandre Aubin
a1d85b6350
Merge branch 'stretch-unstable' into featureCipherStrategy
2019-02-25 00:56:20 +01:00
Alexandre Aubin
198919adc8
Don't add Strict-Transport-Security header in nginx conf if using a self-signed cert
2019-02-22 16:24:19 +01:00
Alexandre Aubin
8f50bdeb28
Merge pull request #622 from ABLD/frju365-patch2
...
Improve protection against indexation from the robots.
2019-02-19 17:09:09 +01:00
Romuald du Song
5d48640f3c
Adapt comment to new context
2019-02-14 23:12:59 +01:00
Romuald du Song
e9274ee443
Handle yunohost admin nginx config
2019-02-14 22:27:49 +01:00
Romuald du Song
7b01ccfefb
remove whitespace control attempt
2019-02-14 21:33:36 +01:00
Romuald du Song
a267e1bc74
what a cumbersome whitespace control
2019-02-14 21:28:56 +01:00
Romuald du Song
3251189ab8
what a cumbersome whitespace control
2019-02-14 21:26:25 +01:00
Romuald du Song
e776c777e6
remove strip whitespace syntax
2019-02-14 21:17:58 +01:00
Romuald du Song
8e1034771a
use setting security_ciphers_compatibility to define security configurations
2019-02-04 23:01:16 +01:00
Alexandre Aubin
4a7e33a145
#564 broke the autoconfig, nginx was lookin for mailconfig.xml instead of main/config.xml
2019-01-30 17:34:51 +01:00
frju365
7b70305448
Update yunohost_admin.conf
2019-01-26 23:51:22 +01:00
Alexandre Aubin
8ec7d361a4
Old comment from when http2 was disabled
2019-01-26 20:11:17 +01:00
frju365
a42df2d8fe
Update yunohost_admin.conf
2019-01-21 21:39:07 +01:00
frju365
08869c329c
Update yunohost_admin.conf
2019-01-21 21:17:33 +01:00
Alexandre Aubin
bd0eef1b36
Remove old comment about jessie
2019-01-18 17:54:26 +01:00
frju365
2e460cb4d6
Update yunohost_admin.conf
2019-01-18 17:31:28 +01:00
frju365
8cb029a55e
Better Configuration of nginx ( #564 )
...
* path-traversal
* [fix] try a patch for path-traversal
* Use more_set_headers insta
2018-11-28 01:21:28 +01:00
liberodark
1906692289
Remove ECDH curve or change it ? ( #579 )
...
Update ECDH curves recommended by Mozilla, now that we are on stretch
2018-11-27 18:30:39 +01:00
liberodark
76121ea084
HTTP2 On ( #580 )
...
* HTTP2 On
for better security
* Remove old lines
2018-11-27 18:27:01 +01:00
frju365
d77b157bcc
[enh] Set Path as full-path ( #563 )
...
* [fix] Set Path as full-path
* same
* Update yunohost_admin.conf
2018-10-27 17:47:12 +02:00
frju365
fa66a7b8c7
OCSP Stapling ( #533 )
...
* [enh] Jinja templating
* [enh] try to enable OCSP
* typo
* [mod] use jq (json parsing)
* typo
* well escaping "" :)
* [fix] if 2d part condition
* We need to include this for ynh_render_template to be available >.> ...
* Simplify code
* Gotta export domain too...
* Remove quotes in variable itself..
* Replace previous code blocks by new code
2018-10-27 16:38:25 +02:00
