Commit graph

91 commits

Author SHA1 Message Date
Alexandre Aubin
f050b3c5b8 First version of http exposure diagnosis 2019-10-10 16:13:13 +02:00
Alexandre Aubin
9b3c97000d
Merge pull request #701 from kay0u/patch-5
[enh] WebSocket proxying
2019-04-25 13:51:53 +02:00
Alexandre Aubin
1fc9f7ddad Fix yunohost_admin.conf initialization 2019-04-11 14:27:09 +02:00
Kayou
e9d399f7cd
Format 2019-04-04 12:29:23 +02:00
Kayou
1a1fc0bdff
Add connection_upgrade 2019-04-04 12:28:00 +02:00
Alexandre Aubin
bdc78530cf
Merge pull request #689 from YunoHost/tweaks_for_theme
[enh] Nginx conf tweaks for theme
2019-04-01 02:50:44 +02:00
Alexandre Aubin
dbafa47f88
Merge branch 'stretch-unstable' into featureCipherStrategy 2019-03-23 18:19:04 +01:00
Alexandre Aubin
dcff10f6f8 Simplify setting usage in regenconf hooks 2019-03-22 16:31:45 +01:00
ljf (zamentur)
c8d8e0e272
[fix] Avoid potential conflict with some apps 2019-03-22 16:30:02 +01:00
ljf (zamentur)
2defd6ffa8
[fix] Keep user info in json format
Previously it was ynhpanel.json
2019-03-22 16:20:35 +01:00
Alexandre Aubin
b99b22bb03 Propagate file renaming for semantic 2019-03-19 01:17:45 +01:00
Alexandre Aubin
3af3c2b779 Directly inject standard css + custom css and js 2019-03-18 19:37:52 +01:00
Alexandre Aubin
a8f88e7232 [yolo] gzip off in global.conf breaks everything because conflict with gzip on; in nginx.conf ... Moving it to server blocs 2019-03-13 19:11:49 +01:00
Alexandre Aubin
2818abe500
Update global.conf 2019-03-09 16:45:53 +01:00
Alexandre Aubin
a1d85b6350
Merge branch 'stretch-unstable' into featureCipherStrategy 2019-02-25 00:56:20 +01:00
Alexandre Aubin
198919adc8 Don't add Strict-Transport-Security header in nginx conf if using a self-signed cert 2019-02-22 16:24:19 +01:00
Alexandre Aubin
8f50bdeb28
Merge pull request #622 from ABLD/frju365-patch2
Improve protection against indexation from the robots.
2019-02-19 17:09:09 +01:00
Romuald du Song
5d48640f3c Adapt comment to new context 2019-02-14 23:12:59 +01:00
Romuald du Song
e9274ee443 Handle yunohost admin nginx config 2019-02-14 22:27:49 +01:00
Romuald du Song
7b01ccfefb remove whitespace control attempt 2019-02-14 21:33:36 +01:00
Romuald du Song
a267e1bc74 what a cumbersome whitespace control 2019-02-14 21:28:56 +01:00
Romuald du Song
3251189ab8 what a cumbersome whitespace control 2019-02-14 21:26:25 +01:00
Romuald du Song
e776c777e6 remove strip whitespace syntax 2019-02-14 21:17:58 +01:00
Romuald du Song
8e1034771a use setting security_ciphers_compatibility to define security configurations 2019-02-04 23:01:16 +01:00
Alexandre Aubin
4a7e33a145 #564 broke the autoconfig, nginx was lookin for mailconfig.xml instead of main/config.xml 2019-01-30 17:34:51 +01:00
frju365
7b70305448
Update yunohost_admin.conf 2019-01-26 23:51:22 +01:00
Alexandre Aubin
8ec7d361a4 Old comment from when http2 was disabled 2019-01-26 20:11:17 +01:00
frju365
a42df2d8fe
Update yunohost_admin.conf 2019-01-21 21:39:07 +01:00
frju365
08869c329c
Update yunohost_admin.conf 2019-01-21 21:17:33 +01:00
Alexandre Aubin
bd0eef1b36
Remove old comment about jessie 2019-01-18 17:54:26 +01:00
frju365
2e460cb4d6
Update yunohost_admin.conf 2019-01-18 17:31:28 +01:00
frju365
8cb029a55e Better Configuration of nginx (#564)
* path-traversal

* [fix] try a patch for path-traversal

* Use more_set_headers insta
2018-11-28 01:21:28 +01:00
liberodark
1906692289 Remove ECDH curve or change it ? (#579)
Update ECDH curves recommended by Mozilla, now that we are on stretch
2018-11-27 18:30:39 +01:00
liberodark
76121ea084 HTTP2 On (#580)
* HTTP2 On

for better security

* Remove old lines
2018-11-27 18:27:01 +01:00
frju365
d77b157bcc [enh] Set Path as full-path (#563)
* [fix] Set Path as full-path
* same
* Update yunohost_admin.conf
2018-10-27 17:47:12 +02:00
frju365
fa66a7b8c7 OCSP Stapling (#533)
* [enh] Jinja templating
* [enh] try to enable OCSP
* typo
* [mod] use jq (json parsing)
* typo
* well escaping "" :)
* [fix] if 2d part condition
* We need to include this for ynh_render_template to be available >.> ...
* Simplify code
* Gotta export domain too...
* Remove quotes in variable itself..
* Replace previous code blocks by new code
2018-10-27 16:38:25 +02:00
Gabriel Corona
8691017b46 Pass Host header to YunoHost API
This is useful to validate Origin/Referer headers in order to prevent
CSRF.
2018-10-24 19:44:24 +00:00
pitchum
a7e85dbbba [enh] Add MUA autoconfig. 2018-06-25 09:45:13 +02:00
Alexandre Aubin
dd8af083b3 Merge branch 'unstable' into stretch-unstable 2018-05-20 21:43:05 +02:00
Alexandre Aubin
c75a3f1b44 Also disabling httpt2 in yunohost_admin.conf 2018-05-08 05:50:39 +02:00
Alexandre Aubin
3feae2e877 Some ecdh_curve don't work on jessie 2018-05-02 19:48:36 +02:00
Alexandre Aubin
25bd5648a7 Disabling http2 for now as it's causing weird issues with curl 2018-05-02 18:16:08 +02:00
frju365
cc3c704ba8 [enh] Enable HTTP2 protocol in nginx conf (#448)
* [Add] http2
* Update yunohost_admin.conf
2018-05-02 18:07:30 +02:00
frju365
9ebb082e32 [fix] Nginx Regression typo (#459) 2018-05-02 14:10:13 +02:00
Bram
c36431ce24
Merge pull request #454 from frju365/patch-2
[enh] ECDH Curves
2018-05-02 06:36:39 +02:00
frju365
90e093a482 Tweak the CSP config in nginx template for domains (#456)
* Little correction for template conf for apps
* Move the default-src CSP thing to report-only for now
2018-05-01 23:44:23 +02:00
frju365
6c07296b9f
[Fix] ECdH curve not compatible with Jessie 2018-05-01 17:16:27 +02:00
frju365
57155c94d8
[Fix] ECDH curve not compatible 2018-05-01 17:15:55 +02:00
frju365
d497fd216a
Update server.tpl.conf 2018-04-28 21:40:39 +02:00
frju365
3a4ac25721
Update yunohost_admin.conf 2018-04-28 21:40:13 +02:00