Commit graph

126 commits

Author SHA1 Message Date
Alexandre Aubin
198919adc8 Don't add Strict-Transport-Security header in nginx conf if using a self-signed cert 2019-02-22 16:24:19 +01:00
Alexandre Aubin
8f50bdeb28
Merge pull request #622 from ABLD/frju365-patch2
Improve protection against indexation from the robots.
2019-02-19 17:09:09 +01:00
Romuald du Song
5d48640f3c Adapt comment to new context 2019-02-14 23:12:59 +01:00
Romuald du Song
e9274ee443 Handle yunohost admin nginx config 2019-02-14 22:27:49 +01:00
Romuald du Song
7b01ccfefb remove whitespace control attempt 2019-02-14 21:33:36 +01:00
Romuald du Song
a267e1bc74 what a cumbersome whitespace control 2019-02-14 21:28:56 +01:00
Romuald du Song
3251189ab8 what a cumbersome whitespace control 2019-02-14 21:26:25 +01:00
Romuald du Song
e776c777e6 remove strip whitespace syntax 2019-02-14 21:17:58 +01:00
Romuald du Song
8e1034771a use setting security_ciphers_compatibility to define security configurations 2019-02-04 23:01:16 +01:00
Alexandre Aubin
4a7e33a145 #564 broke the autoconfig, nginx was lookin for mailconfig.xml instead of main/config.xml 2019-01-30 17:34:51 +01:00
frju365
7b70305448
Update yunohost_admin.conf 2019-01-26 23:51:22 +01:00
Alexandre Aubin
8ec7d361a4 Old comment from when http2 was disabled 2019-01-26 20:11:17 +01:00
frju365
a42df2d8fe
Update yunohost_admin.conf 2019-01-21 21:39:07 +01:00
frju365
08869c329c
Update yunohost_admin.conf 2019-01-21 21:17:33 +01:00
Alexandre Aubin
bd0eef1b36
Remove old comment about jessie 2019-01-18 17:54:26 +01:00
frju365
2e460cb4d6
Update yunohost_admin.conf 2019-01-18 17:31:28 +01:00
frju365
8cb029a55e Better Configuration of nginx (#564)
* path-traversal

* [fix] try a patch for path-traversal

* Use more_set_headers insta
2018-11-28 01:21:28 +01:00
liberodark
1906692289 Remove ECDH curve or change it ? (#579)
Update ECDH curves recommended by Mozilla, now that we are on stretch
2018-11-27 18:30:39 +01:00
liberodark
76121ea084 HTTP2 On (#580)
* HTTP2 On

for better security

* Remove old lines
2018-11-27 18:27:01 +01:00
frju365
d77b157bcc [enh] Set Path as full-path (#563)
* [fix] Set Path as full-path
* same
* Update yunohost_admin.conf
2018-10-27 17:47:12 +02:00
frju365
fa66a7b8c7 OCSP Stapling (#533)
* [enh] Jinja templating
* [enh] try to enable OCSP
* typo
* [mod] use jq (json parsing)
* typo
* well escaping "" :)
* [fix] if 2d part condition
* We need to include this for ynh_render_template to be available >.> ...
* Simplify code
* Gotta export domain too...
* Remove quotes in variable itself..
* Replace previous code blocks by new code
2018-10-27 16:38:25 +02:00
Gabriel Corona
8691017b46 Pass Host header to YunoHost API
This is useful to validate Origin/Referer headers in order to prevent
CSRF.
2018-10-24 19:44:24 +00:00
pitchum
a7e85dbbba [enh] Add MUA autoconfig. 2018-06-25 09:45:13 +02:00
Alexandre Aubin
dd8af083b3 Merge branch 'unstable' into stretch-unstable 2018-05-20 21:43:05 +02:00
Alexandre Aubin
c75a3f1b44 Also disabling httpt2 in yunohost_admin.conf 2018-05-08 05:50:39 +02:00
Alexandre Aubin
3feae2e877 Some ecdh_curve don't work on jessie 2018-05-02 19:48:36 +02:00
Alexandre Aubin
25bd5648a7 Disabling http2 for now as it's causing weird issues with curl 2018-05-02 18:16:08 +02:00
frju365
cc3c704ba8 [enh] Enable HTTP2 protocol in nginx conf (#448)
* [Add] http2
* Update yunohost_admin.conf
2018-05-02 18:07:30 +02:00
frju365
9ebb082e32 [fix] Nginx Regression typo (#459) 2018-05-02 14:10:13 +02:00
Bram
c36431ce24
Merge pull request #454 from frju365/patch-2
[enh] ECDH Curves
2018-05-02 06:36:39 +02:00
frju365
90e093a482 Tweak the CSP config in nginx template for domains (#456)
* Little correction for template conf for apps
* Move the default-src CSP thing to report-only for now
2018-05-01 23:44:23 +02:00
frju365
6c07296b9f
[Fix] ECdH curve not compatible with Jessie 2018-05-01 17:16:27 +02:00
frju365
57155c94d8
[Fix] ECDH curve not compatible 2018-05-01 17:15:55 +02:00
frju365
d497fd216a
Update server.tpl.conf 2018-04-28 21:40:39 +02:00
frju365
3a4ac25721
Update yunohost_admin.conf 2018-04-28 21:40:13 +02:00
frju365
1bb65cfdf8
[enh] add X25519 curve 2018-04-28 21:34:23 +02:00
frju365
f59eed7b7e
[enh] add X25519 curve 2018-04-28 21:33:49 +02:00
frju365
15a331ec5d
Update yunohost_admin.conf 2018-04-28 21:21:44 +02:00
frju365
d73789c546
Update server.tpl.conf 2018-04-28 21:21:25 +02:00
frju365
8c3c9e697a
[enh] ECDH Curves 2018-04-28 20:44:44 +02:00
frju365
0154f15d95
[enh] ECDH Curves 2018-04-28 20:42:57 +02:00
Laurent Peuch
bda19df019
Merge pull request #399 from frju365/unstable
Fix security of nginx headers .
2018-02-09 19:32:23 +01:00
frju365
6ab29260cf
[enh] Mozilla directives. 2018-02-09 16:25:09 +01:00
frju365
4276a187a0
[enh] Comment with the URL of the Mozilla Directives 2018-02-09 16:24:16 +01:00
frju365
03273e3b94
[fix] typo 2018-02-09 16:20:29 +01:00
frju365
4f616fe8c7
[Fix] CSP cf. another PR. 2018-02-09 16:11:41 +01:00
frju365
c824f403a4
[Fix] Referrer, CSP bad conf. cf. Another pr. 2018-02-09 16:10:31 +01:00
Laurent Peuch
c6d6367077
Merge pull request #356 from ariasuni/unstable
[enh] enable gzip compression for common text mimetypes in Nginx
2018-02-08 00:40:34 +01:00
Alexandre Aubin
6f2acb7eb6
Wording 2018-01-18 21:10:08 +01:00
ljf
5cf6895ba2 [fix] Bad issue number in a comment 2018-01-17 17:22:13 +01:00