55 commits

Author	SHA1	Message	Date
Alexandre Aubin	c5d06af20e	Guess what ... If people manually tweaked their nginx.conf to enable gzip globally, this will break cert renewal ..	2020-12-11 20:40:45 +01:00
Alexandre Aubin	cc4db7a6f6	Add a comment explaining why the location is empty	2020-09-03 23:47:24 +02:00
ljf	f92b84bd94	[fix] SSO unavailable	2020-09-03 22:27:46 +02:00
Alexandre Aubin	b3db4d92fc	Bump server_names_hash_bucket_size to 128 to avoid nginx exploding for stupid reasons	2020-05-27 17:10:39 +02:00
Alexandre Aubin	0fba21f924	Enforce CSP rules for real on webadmin	2020-04-29 01:07:07 +02:00
Kayou	9af942afa0	Merge pull request #925 from YunoHost/kay0u-patch-1 ... [fix] custom_portal and custom_overlay redirect	2020-04-18 01:42:58 +02:00
Kayou	4968f1aa7d	[fix] custom_portal and custom_overlay redirect	2020-04-09 18:08:51 +02:00
Alexandre Aubin	3a7b93d8aa	Get rid of domain-specific acme-challenge snippet, use a single snippet including in every conf	2020-04-06 18:09:14 +02:00
Alexandre Aubin	1fc9f7ddad	Fix yunohost_admin.conf initialization	2019-04-11 14:27:09 +02:00
Alexandre Aubin	bdc78530cf	Merge pull request #689 from YunoHost/tweaks_for_theme ... [enh] Nginx conf tweaks for theme	2019-04-01 02:50:44 +02:00
Alexandre Aubin	dbafa47f88	Merge branch 'stretch-unstable' into featureCipherStrategy	2019-03-23 18:19:04 +01:00
Alexandre Aubin	dcff10f6f8	Simplify setting usage in regenconf hooks	2019-03-22 16:31:45 +01:00
ljf (zamentur)	c8d8e0e272	[fix] Avoid potential conflict with some apps	2019-03-22 16:30:02 +01:00
ljf (zamentur)	2defd6ffa8	[fix] Keep user info in json format ... Previously it was ynhpanel.json	2019-03-22 16:20:35 +01:00
Alexandre Aubin	b99b22bb03	Propagate file renaming for semantic	2019-03-19 01:17:45 +01:00
Alexandre Aubin	3af3c2b779	Directly inject standard css + custom css and js	2019-03-18 19:37:52 +01:00
Alexandre Aubin	a8f88e7232	[yolo] gzip off in global.conf breaks everything because conflict with gzip on; in nginx.conf ... Moving it to server blocs	2019-03-13 19:11:49 +01:00
Alexandre Aubin	2818abe500	Update global.conf	2019-03-09 16:45:53 +01:00
Alexandre Aubin	a1d85b6350	Merge branch 'stretch-unstable' into featureCipherStrategy	2019-02-25 00:56:20 +01:00
Alexandre Aubin	8f50bdeb28	Merge pull request #622 from ABLD/frju365-patch2 ... Improve protection against indexation from the robots.	2019-02-19 17:09:09 +01:00
Romuald du Song	e9274ee443	Handle yunohost admin nginx config	2019-02-14 22:27:49 +01:00
frju365	7b70305448	Update yunohost_admin.conf	2019-01-26 23:51:22 +01:00
Alexandre Aubin	8ec7d361a4	Old comment from when http2 was disabled	2019-01-26 20:11:17 +01:00
frju365	a42df2d8fe	Update yunohost_admin.conf	2019-01-21 21:39:07 +01:00
frju365	08869c329c	Update yunohost_admin.conf	2019-01-21 21:17:33 +01:00
Alexandre Aubin	bd0eef1b36	Remove old comment about jessie	2019-01-18 17:54:26 +01:00
frju365	2e460cb4d6	Update yunohost_admin.conf	2019-01-18 17:31:28 +01:00
frju365	d77b157bcc	[enh] Set Path as full-path (#563) ... * [fix] Set Path as full-path * same * Update yunohost_admin.conf	2018-10-27 17:47:12 +02:00
Gabriel Corona	8691017b46	Pass Host header to YunoHost API ... This is useful to validate Origin/Referer headers in order to prevent CSRF.	2018-10-24 19:44:24 +00:00
Alexandre Aubin	dd8af083b3	Merge branch 'unstable' into stretch-unstable	2018-05-20 21:43:05 +02:00
Alexandre Aubin	c75a3f1b44	Also disabling httpt2 in yunohost_admin.conf	2018-05-08 05:50:39 +02:00
Alexandre Aubin	3feae2e877	Some ecdh_curve don't work on jessie	2018-05-02 19:48:36 +02:00
frju365	cc3c704ba8	[enh] Enable HTTP2 protocol in nginx conf (#448) ... * [Add] http2 * Update yunohost_admin.conf	2018-05-02 18:07:30 +02:00
frju365	57155c94d8	[Fix] ECDH curve not compatible	2018-05-01 17:15:55 +02:00
frju365	3a4ac25721	Update yunohost_admin.conf	2018-04-28 21:40:13 +02:00
frju365	1bb65cfdf8	[enh] add X25519 curve	2018-04-28 21:34:23 +02:00
frju365	15a331ec5d	Update yunohost_admin.conf	2018-04-28 21:21:44 +02:00
frju365	8c3c9e697a	[enh] ECDH Curves	2018-04-28 20:44:44 +02:00
Laurent Peuch	bda19df019	Merge pull request #399 from frju365/unstable ... Fix security of nginx headers .	2018-02-09 19:32:23 +01:00
frju365	6ab29260cf	[enh] Mozilla directives.	2018-02-09 16:25:09 +01:00
frju365	4f616fe8c7	[Fix] CSP cf. another PR.	2018-02-09 16:11:41 +01:00
Laurent Peuch	c6d6367077	Merge pull request #356 from ariasuni/unstable ... [enh] enable gzip compression for common text mimetypes in Nginx	2018-02-08 00:40:34 +01:00
Alexandre Aubin	6f2acb7eb6	Wording	2018-01-18 21:10:08 +01:00
ljf	5cf6895ba2	[fix] Bad issue number in a comment	2018-01-17 17:22:13 +01:00
ljf	8a2434eb44	[fix] Nginx traversal issue	2018-01-17 17:19:06 +01:00
Alexandre Aubin	4eeeb783af	Keep only css and javascript for gzip types.	2018-01-14 02:11:11 +01:00
frju365	bd2f459e86	[Fix] Referrer	2017-12-30 11:18:58 +01:00
frju365	804d0b29c3	[Fix] Add CSP in Admin conf	2017-12-29 18:25:17 +01:00
frju365	5cd30e584d	[Fix] Nginx headers in Admin conf	2017-12-29 16:16:37 +01:00
ariasuni	e1b5eead3f	[fix] disable gzip compression for json to avoid BREACH attack	2017-08-28 16:42:32 +02:00