126 commits

Author	SHA1	Message	Date
Kayou	fea1ad474b	remove cache	2021-01-28 00:03:38 +01:00
Kay0u	0efd830743	fix can ynh-admin vuejs	2021-01-22 14:49:47 +01:00
Alexandre Aubin	c5d06af20e	Guess what ... If people manually tweaked their nginx.conf to enable gzip globally, this will break cert renewal ..	2020-12-11 20:40:45 +01:00
Alexandre Aubin	ba884d5b6d	Get rid of yunohost.local in main domain nginx conf ... because this interfer with using yunohost.local for postinstall. Just let it be handled by the default vhost	2020-10-03 16:32:31 +02:00
Alexandre Aubin	cc4db7a6f6	Add a comment explaining why the location is empty	2020-09-03 23:47:24 +02:00
ljf	f92b84bd94	[fix] SSO unavailable	2020-09-03 22:27:46 +02:00
Alexandre Aubin	f3a4334a13	Upgrade nginx configuration according to Mozilla guidelines now that we're on Buster	2020-08-14 14:50:54 +02:00
Alexandre Aubin	8911499bf3	Merge pull request #1026 from YunoHost/remove-useless-robots-protection ... Remove useless robot protection code	2020-07-05 02:52:23 +02:00
Alexandre Aubin	ac9182d69f	Move redirect to /yunohost/admin to a separate nginx conf file to allow customizing it more easily	2020-06-25 21:42:46 +02:00
Alexandre Aubin	f1bfc521ae	Allow to extend the nginx default_server configuration	2020-06-25 20:04:11 +02:00
Alexandre Aubin	74ef4d1cf7	Remove useless robot protection code	2020-06-25 19:46:22 +02:00
Alexandre Aubin	203bc01e0c	Merge pull request #1007 from SohKa/add-predefined-dh-group ... Add pre-defined DHE group and set up Nginx to use it	2020-06-04 18:51:53 +02:00
Alexandre Aubin	1cfa815aaa	Propagate location change for ffdhe2048.pem	2020-06-04 18:44:02 +02:00
Alexandre Aubin	9906617aa1	Add comments about where the DH param comes from	2020-06-04 18:41:05 +02:00
Alexandre Aubin	b3db4d92fc	Bump server_names_hash_bucket_size to 128 to avoid nginx exploding for stupid reasons	2020-05-27 17:10:39 +02:00
SohKa	d4bea7dd34	Add pre-defined DHE group and set up Nginx to use it	2020-05-26 19:17:03 +02:00
Alexandre Aubin	0fba21f924	Enforce CSP rules for real on webadmin	2020-04-29 01:07:07 +02:00
Alexandre Aubin	c0c026613f	Add wss: to default to get rid of angry CSP on webadmin	2020-04-27 02:15:14 +02:00
Alexandre Aubin	194a0bb187	We need that trailing / for the download of files to actually work, c.f. feedback in 3.8 post on the forum	2020-04-21 15:46:03 +02:00
Kayou	9af942afa0	Merge pull request #925 from YunoHost/kay0u-patch-1 ... [fix] custom_portal and custom_overlay redirect	2020-04-18 01:42:58 +02:00
Alexandre Aubin	1e6da91c78	Add automail conf for https, + increase priority for automail conf and diagnosis	2020-04-11 00:29:49 +02:00
Kayou	887304919e	Merge pull request #917 from YunoHost/fix-acme-challenge-snippet ... Get rid of domain-specific acme-challenge snippet, use a single snippet included in every conf	2020-04-09 21:07:50 +02:00
Kayou	4968f1aa7d	[fix] custom_portal and custom_overlay redirect	2020-04-09 18:08:51 +02:00
Alexandre Aubin	c06fe42078	Hmgn don't change the value for the session cache size otherwise that break test for restore from old version for stupid reasons -.-	2020-04-08 21:33:34 +02:00
Alexandre Aubin	71cc4fde97	We in fact only have ssl 1.1.0l, not 1.1.1l on Stretch.	2020-04-08 19:59:27 +02:00
Alexandre Aubin	f390f02077	Update nginx security.conf.inc with new Mozilla recommendation	2020-04-08 19:59:27 +02:00
Alexandre Aubin	3a7b93d8aa	Get rid of domain-specific acme-challenge snippet, use a single snippet including in every conf	2020-04-06 18:09:14 +02:00
Alexandre Aubin	22b9565eb7	Forgot to check that these headers are different from the default in security.conf ... maybe we want to keep them as is? Not clear why they have different values tan the domain configs...	2020-04-06 16:56:53 +02:00
Alexandre Aubin	4d99cbe870	Add ref for security headers	2020-04-06 16:55:20 +02:00
Alexandre Aubin	128577686a	Forgot to make yunohost_admin.conf to also use the common securit.conf.inc	2020-04-03 03:09:46 +02:00
pitchum	5e6e53142b	Improve nginx config for xmpp-upload subdomain.	2020-03-25 12:09:53 +01:00
pitchum	1f09abfa51	Rationalize some nginx config into security.conf.inc.	2020-03-25 11:51:57 +01:00
Alexandre Aubin	af415e38e6	Factorize ciphers and headers configuration into a common file for all vhosts	2020-03-23 22:43:29 +01:00
Alexandre Aubin	27f6899b65	/var/www/xmpp-upload.{domain} -> /var/xmpp-upload/{domain}	2020-03-23 22:15:03 +01:00
pitchum	994f0ca1ef	nginx + metronome config for http_upload	2020-03-22 08:36:33 +01:00
Alexandre Aubin	f050b3c5b8	First version of http exposure diagnosis	2019-10-10 16:13:13 +02:00
Alexandre Aubin	9b3c97000d	Merge pull request #701 from kay0u/patch-5 ... [enh] WebSocket proxying	2019-04-25 13:51:53 +02:00
Alexandre Aubin	1fc9f7ddad	Fix yunohost_admin.conf initialization	2019-04-11 14:27:09 +02:00
Kayou	e9d399f7cd	Format	2019-04-04 12:29:23 +02:00
Kayou	1a1fc0bdff	Add connection_upgrade	2019-04-04 12:28:00 +02:00
Alexandre Aubin	bdc78530cf	Merge pull request #689 from YunoHost/tweaks_for_theme ... [enh] Nginx conf tweaks for theme	2019-04-01 02:50:44 +02:00
Alexandre Aubin	dbafa47f88	Merge branch 'stretch-unstable' into featureCipherStrategy	2019-03-23 18:19:04 +01:00
Alexandre Aubin	dcff10f6f8	Simplify setting usage in regenconf hooks	2019-03-22 16:31:45 +01:00
ljf (zamentur)	c8d8e0e272	[fix] Avoid potential conflict with some apps	2019-03-22 16:30:02 +01:00
ljf (zamentur)	2defd6ffa8	[fix] Keep user info in json format ... Previously it was ynhpanel.json	2019-03-22 16:20:35 +01:00
Alexandre Aubin	b99b22bb03	Propagate file renaming for semantic	2019-03-19 01:17:45 +01:00
Alexandre Aubin	3af3c2b779	Directly inject standard css + custom css and js	2019-03-18 19:37:52 +01:00
Alexandre Aubin	a8f88e7232	[yolo] gzip off in global.conf breaks everything because conflict with gzip on; in nginx.conf ... Moving it to server blocs	2019-03-13 19:11:49 +01:00
Alexandre Aubin	2818abe500	Update global.conf	2019-03-09 16:45:53 +01:00
Alexandre Aubin	a1d85b6350	Merge branch 'stretch-unstable' into featureCipherStrategy	2019-02-25 00:56:20 +01:00