Commit graph

52 commits

Author SHA1 Message Date
Alexandre Aubin
b3db4d92fc Bump server_names_hash_bucket_size to 128 to avoid nginx exploding for stupid reasons 2020-05-27 17:10:39 +02:00
Alexandre Aubin
0fba21f924 Enforce CSP rules for real on webadmin 2020-04-29 01:07:07 +02:00
Kayou
9af942afa0
Merge pull request #925 from YunoHost/kay0u-patch-1
[fix] custom_portal and custom_overlay redirect
2020-04-18 01:42:58 +02:00
Kayou
4968f1aa7d
[fix] custom_portal and custom_overlay redirect 2020-04-09 18:08:51 +02:00
Alexandre Aubin
3a7b93d8aa Get rid of domain-specific acme-challenge snippet, use a single snippet including in every conf 2020-04-06 18:09:14 +02:00
Alexandre Aubin
1fc9f7ddad Fix yunohost_admin.conf initialization 2019-04-11 14:27:09 +02:00
Alexandre Aubin
bdc78530cf
Merge pull request #689 from YunoHost/tweaks_for_theme
[enh] Nginx conf tweaks for theme
2019-04-01 02:50:44 +02:00
Alexandre Aubin
dbafa47f88
Merge branch 'stretch-unstable' into featureCipherStrategy 2019-03-23 18:19:04 +01:00
Alexandre Aubin
dcff10f6f8 Simplify setting usage in regenconf hooks 2019-03-22 16:31:45 +01:00
ljf (zamentur)
c8d8e0e272
[fix] Avoid potential conflict with some apps 2019-03-22 16:30:02 +01:00
ljf (zamentur)
2defd6ffa8
[fix] Keep user info in json format
Previously it was ynhpanel.json
2019-03-22 16:20:35 +01:00
Alexandre Aubin
b99b22bb03 Propagate file renaming for semantic 2019-03-19 01:17:45 +01:00
Alexandre Aubin
3af3c2b779 Directly inject standard css + custom css and js 2019-03-18 19:37:52 +01:00
Alexandre Aubin
a8f88e7232 [yolo] gzip off in global.conf breaks everything because conflict with gzip on; in nginx.conf ... Moving it to server blocs 2019-03-13 19:11:49 +01:00
Alexandre Aubin
2818abe500
Update global.conf 2019-03-09 16:45:53 +01:00
Alexandre Aubin
a1d85b6350
Merge branch 'stretch-unstable' into featureCipherStrategy 2019-02-25 00:56:20 +01:00
Alexandre Aubin
8f50bdeb28
Merge pull request #622 from ABLD/frju365-patch2
Improve protection against indexation from the robots.
2019-02-19 17:09:09 +01:00
Romuald du Song
e9274ee443 Handle yunohost admin nginx config 2019-02-14 22:27:49 +01:00
frju365
7b70305448
Update yunohost_admin.conf 2019-01-26 23:51:22 +01:00
Alexandre Aubin
8ec7d361a4 Old comment from when http2 was disabled 2019-01-26 20:11:17 +01:00
frju365
a42df2d8fe
Update yunohost_admin.conf 2019-01-21 21:39:07 +01:00
frju365
08869c329c
Update yunohost_admin.conf 2019-01-21 21:17:33 +01:00
Alexandre Aubin
bd0eef1b36
Remove old comment about jessie 2019-01-18 17:54:26 +01:00
frju365
2e460cb4d6
Update yunohost_admin.conf 2019-01-18 17:31:28 +01:00
frju365
d77b157bcc [enh] Set Path as full-path (#563)
* [fix] Set Path as full-path
* same
* Update yunohost_admin.conf
2018-10-27 17:47:12 +02:00
Gabriel Corona
8691017b46 Pass Host header to YunoHost API
This is useful to validate Origin/Referer headers in order to prevent
CSRF.
2018-10-24 19:44:24 +00:00
Alexandre Aubin
dd8af083b3 Merge branch 'unstable' into stretch-unstable 2018-05-20 21:43:05 +02:00
Alexandre Aubin
c75a3f1b44 Also disabling httpt2 in yunohost_admin.conf 2018-05-08 05:50:39 +02:00
Alexandre Aubin
3feae2e877 Some ecdh_curve don't work on jessie 2018-05-02 19:48:36 +02:00
frju365
cc3c704ba8 [enh] Enable HTTP2 protocol in nginx conf (#448)
* [Add] http2
* Update yunohost_admin.conf
2018-05-02 18:07:30 +02:00
frju365
57155c94d8
[Fix] ECDH curve not compatible 2018-05-01 17:15:55 +02:00
frju365
3a4ac25721
Update yunohost_admin.conf 2018-04-28 21:40:13 +02:00
frju365
1bb65cfdf8
[enh] add X25519 curve 2018-04-28 21:34:23 +02:00
frju365
15a331ec5d
Update yunohost_admin.conf 2018-04-28 21:21:44 +02:00
frju365
8c3c9e697a
[enh] ECDH Curves 2018-04-28 20:44:44 +02:00
Laurent Peuch
bda19df019
Merge pull request #399 from frju365/unstable
Fix security of nginx headers .
2018-02-09 19:32:23 +01:00
frju365
6ab29260cf
[enh] Mozilla directives. 2018-02-09 16:25:09 +01:00
frju365
4f616fe8c7
[Fix] CSP cf. another PR. 2018-02-09 16:11:41 +01:00
Laurent Peuch
c6d6367077
Merge pull request #356 from ariasuni/unstable
[enh] enable gzip compression for common text mimetypes in Nginx
2018-02-08 00:40:34 +01:00
Alexandre Aubin
6f2acb7eb6
Wording 2018-01-18 21:10:08 +01:00
ljf
5cf6895ba2 [fix] Bad issue number in a comment 2018-01-17 17:22:13 +01:00
ljf
8a2434eb44 [fix] Nginx traversal issue 2018-01-17 17:19:06 +01:00
Alexandre Aubin
4eeeb783af
Keep only css and javascript for gzip types. 2018-01-14 02:11:11 +01:00
frju365
bd2f459e86
[Fix] Referrer 2017-12-30 11:18:58 +01:00
frju365
804d0b29c3
[Fix] Add CSP in Admin conf 2017-12-29 18:25:17 +01:00
frju365
5cd30e584d
[Fix] Nginx headers in Admin conf 2017-12-29 16:16:37 +01:00
ariasuni
e1b5eead3f [fix] disable gzip compression for json to avoid BREACH attack 2017-08-28 16:42:32 +02:00
ariasuni
f541edbb2a [enh] enable gzip compression for common text mimetypes in Nginx 2017-08-26 20:24:38 +02:00
Alexandre Aubin
6cc237dcca Changing nginx ciphers to intermediate compatiblity (#298)
* Changing nginx ciphers to intermediate compatiblity
* [fix] Move commented ciphers list after, and add explanation
* [fix] Move commented ciphers list after, and add explanation
2017-04-28 17:37:34 +02:00
JimboJoe
bb11168c31 Fix for missing YunoHost tiles (#276)
This PR:
- brings back [this PR](https://github.com/YunoHost/yunohost-config-nginx/pull/3/files) which seems to have stayed behind when migrating from `yunohost-config-nginx`. It fixes the missing tile for Jirafeau app (and maybe others).
- adds a fix to serve `ynhpanel.*` files whatever the app ningx rules are (some apps nginx conf files block them, like duniter or nextcloud).
2017-03-26 21:07:13 +02:00