Laurent Peuch
c6d6367077
Merge pull request #356 from ariasuni/unstable
...
[enh] enable gzip compression for common text mimetypes in Nginx
2018-02-08 00:40:34 +01:00
Alexandre Aubin
a1831ce0f8
Manage etckeeper.conf to make etckeeper quiet
2018-01-26 22:40:33 +01:00
Alexandre Aubin
6f2acb7eb6
Wording
2018-01-18 21:10:08 +01:00
ljf
5cf6895ba2
[fix] Bad issue number in a comment
2018-01-17 17:22:13 +01:00
ljf
8a2434eb44
[fix] Nginx traversal issue
2018-01-17 17:19:06 +01:00
Alexandre Aubin
4eeeb783af
Keep only css and javascript for gzip types.
2018-01-14 02:11:11 +01:00
Laurent Peuch
3ed6a2a7ef
Revert "Create milter_headers.conf"
...
This reverts commit 0122c26492
2018-01-11 15:15:22 +01:00
taziden
0784917573
Create milter_headers.conf
...
This file define a header : X-Spam which will be added to mail considered as spam by rspamd.
This configuration is defined here : https://rspamd.com/doc/modules/milter_headers.html and as of the time I'm creating this PR, this documentation page is not up-to-date because X-Spam was supposed to be added when extended_spam_headers is set to True and it's not the case anymore since 1.6.2.
This header is being used by rspamd.sieve which we push into dovecot in order to put spammy e-mails in Junk folder automatically.
2018-01-11 14:26:47 +01:00
ljf (zamentur)
a194e1fa1c
[enh] Maintain ssh client connexion
2018-01-04 18:44:13 +01:00
frju365
bd2f459e86
[Fix] Referrer
2017-12-30 11:18:58 +01:00
frju365
b655229cbd
[Fix] Referrer
2017-12-30 11:18:17 +01:00
frju365
804d0b29c3
[Fix] Add CSP in Admin conf
2017-12-29 18:25:17 +01:00
frju365
95835118bd
[Fix] CSP Standart.
2017-12-29 17:59:12 +01:00
frju365
5cd30e584d
[Fix] Nginx headers in Admin conf
2017-12-29 16:16:37 +01:00
frju365
9e19e5316c
[Fix] Nginx headers
2017-12-29 16:07:15 +01:00
frju365
e696caa31f
[Fix] Nginx headers
2017-12-29 16:00:29 +01:00
Maniack Crudelis
cb1728f32c
Remove port 53 from UPnP (but keep it open on local network) ( #362 )
2017-11-28 21:06:16 +01:00
ljf (zamentur)
b0849cc43d
Bad branch
2017-11-28 00:25:06 +01:00
ljf (zamentur)
7df6874fc9
[fix] Open NTP port to update date
2017-11-28 00:23:43 +01:00
Alexandre Aubin
9903c48f3a
Be able to give lock to son processes detached by systemctl ( #367 )
...
* Give lock to systemctl sons
* Get the 'need_lock' flag from services.yml
* Don't need the lock for enable/disable and other stuff
2017-10-08 23:46:10 +02:00
ariasuni
e1b5eead3f
[fix] disable gzip compression for json to avoid BREACH attack
2017-08-28 16:42:32 +02:00
ariasuni
f541edbb2a
[enh] enable gzip compression for common text mimetypes in Nginx
2017-08-26 20:24:38 +02:00
anmol26s
7d5779fcab
[enh] Check that user is legitimate to use an email adress when sending mail ( #330 )
2017-08-05 12:11:53 +02:00
opi
6371ab4a57
[enh] Increase message size. #914 ( #307 )
2017-05-24 08:42:16 +02:00
Alexandre Aubin
6cc237dcca
Changing nginx ciphers to intermediate compatiblity ( #298 )
...
* Changing nginx ciphers to intermediate compatiblity
* [fix] Move commented ciphers list after, and add explanation
* [fix] Move commented ciphers list after, and add explanation
2017-04-28 17:37:34 +02:00
Alexandre Aubin
7718ed6000
[fix] Properly manage resolv.conf, dns resolvers and dnsmasq ( #290 )
...
* Adding resolvconf as dependency
* Adding new templates for dnsmasq
* Adding libnss-myhostname as dependency
* tableflip.gif
* Moar tableflip.gif :/
* Tweaking dns resolvers used by dnsmasq
* Adding Aquilenet + moving FDN back to top
* Clarifying how the resolv.dnsmasq.conf template is used
* Moving nsswitch force regen back to postinstall
2017-04-18 00:37:21 +02:00
JimboJoe
bb11168c31
Fix for missing YunoHost tiles ( #276 )
...
This PR:
- brings back [this PR](https://github.com/YunoHost/yunohost-config-nginx/pull/3/files ) which seems to have stayed behind when migrating from `yunohost-config-nginx`. It fixes the missing tile for Jirafeau app (and maybe others).
- adds a fix to serve `ynhpanel.*` files whatever the app ningx rules are (some apps nginx conf files block them, like duniter or nextcloud).
2017-03-26 21:07:13 +02:00
Laurent Peuch
373ef1acba
Merge pull request #269 from YunoHost/clean-services.yml
...
Clean services.yml
2017-03-20 01:50:09 +01:00
Laurent Peuch
50188ae265
[fix] only remove a service if it is setted to null
2017-03-20 01:49:27 +01:00
Laurent Peuch
f941360edf
Merge pull request #259 from YunoHost/upgrade_cipher_suit
...
[enh] upgrade ciphers suit to more secure ones
2017-03-20 01:35:11 +01:00
ljf
8cba71b514
[fix] Apply cipher suite into webadmin nginx conf
2017-03-20 00:45:33 +01:00
Alexandre Aubin
f851817bbf
Updating ciphers with recommendation from mozilla with modern compatibility
2017-03-12 20:58:45 -04:00
M5oul
9dc2c0cece
Merge pull request #265 from YunoHost/dnsmasq_conf_mod
...
[fix] dnsmasq conf: remove 'resolv-file' line.
2017-03-07 10:32:05 +01:00
M5oul
9500b3d6a8
Merge pull request #264 from YunoHost/dnsmasq_conf_clean
...
[mod] dnsmasq conf: remove deprecated XMPP DNS record line.
2017-03-07 10:29:54 +01:00
Laurent Peuch
a18486df05
[enh] add other services to remove
2017-03-07 00:30:58 +01:00
Laurent Peuch
6d1c62d619
[fix] we don't use bind9, add null entry to remove it from old services.yml
2017-03-07 00:30:58 +01:00
Laurent Peuch
949e4de20a
[fix] nsswitch and udisks2 aren't used anymore
2017-03-07 00:30:58 +01:00
Laurent Peuch
d7da9b4565
Merge pull request #260 from thardev/enh-691-show-fail2ban-logs-web
...
[enh] Show fail2ban logs on admin web interface
2017-03-06 15:57:18 +01:00
Moul
20378fc2fc
[fix] dnsmasq conf: remove 'resolv-file' line.
...
- there is no file specified for this line.
- dns resolution isn't working on some cases:
- metronome could not works.
- https://forum.yunohost.org/t/xmpp-cant-connect-to-conference-yunohost-org/2142
2017-03-03 08:59:37 +01:00
Moul
eb5a7607e4
[mod] dnsmasq conf: remove deprecated XMPP DNS record line.
...
- https://serverfault.com/questions/582106/should-i-specify-the-srv-record-jabber-tcp
2017-03-03 08:36:20 +01:00
thardev
ade8c59f0a
show fail2ban logs on admin web interface
2017-02-27 20:31:04 +01:00
Laurent Peuch
087cdb961c
[enh] upgrade ciphers suit to more secure ones
2017-02-25 22:04:52 +01:00
opi
088abd694e
Merge branch 'testing' into unstable
2017-02-18 15:53:39 +01:00
opi
1c2de37f63
[fix] Update Rmilter configuration to fix dkim signing.
2017-02-18 14:52:33 +01:00
M5oul
dea89fc6bb
Merge pull request #243 from YunoHost/fix-rspamd-rmilter-status
...
[fix] Rspamd & Rmilter are no more sockets
2017-02-07 18:28:28 +01:00
opi
98d88f2364
[fix] Unattended upgrades configuration syntax.
2017-02-05 22:28:43 +01:00
opi
7d4aa63c43
[fix] Rspamd & Rmilter are no more sockets
...
Changes introduced by b419c8c564
2017-02-05 14:23:55 +01:00
Laurent Peuch
fc7c35c319
Merge pull request #216 from opi/patch-2
...
[enh] Increase fail2ban maxretry on user login, narrow nginx log files
2017-01-15 19:39:35 +01:00
ljf
2cf4768aa1
[fix] Postfix can't access rmilter socket due to chroot
2017-01-09 15:34:52 +01:00
ljf
b419c8c564
[fix] new rspamd version replace rspamd.socket with rspamd.service
2017-01-04 13:06:13 +01:00
