- Nov 07, 2022
-
-
Rob Petti authored
-
- Oct 29, 2022
-
-
Yurii Izorkin authored
* nginx: optimize locations * nginx: don't use regex in locations * nginx: optimize Cache-Control headaers * nginx: use 404 error_page for missing static files * nginx: sort locations * nginx: add missing HSTS header
-
- Oct 27, 2022
-
-
Shlee authored
* Update nginx.conf * Update nginx.conf * Update nginx.conf
-
- Feb 26, 2022
-
-
LinAGKar authored
-
- Aug 20, 2021
-
-
Peter Dave Hello authored
By default, it'll only send those headers when the response code is one of the following: - 200, 201, 204, 206, 301, 302, 303, 304, 307 & 308 As all the traffics should be https, the http protocol only exists to do 301 redirect, and always send the HSTS header is almost one of the best practices, we should set nginx to do so. Reference: - https://nginx.org/en/docs/http/ngx_http_headers_module.html#add_header - https://ssl-config.mozilla.org/
-
Peter Dave Hello authored
It's default turned on, but it's better to turn it off for security reason. Reference: - https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_tickets - https://github.com/mozilla/server-side-tls/issues/135
-
- Jan 05, 2021
-
-
Cecylia Bocovich authored
This fixes a bug that prevents logins to mastodon onion services. The nginx directive assumed all requests were made over https, causing a domain mismatch for onion services that have https redirects disabled. The fix more correctly sets X-Forwarded-Proto to the actual scheme used in the request.
-
- Mar 08, 2020
-
-
Shlee authored
-
- Aug 30, 2019
-
-
ichi_i authored
Maintain TLS v1.2 compatibility (might want to drop this later) and add support for TLS v1.3
-
- Mar 30, 2019
-
-
Eugen Rochko authored
-
- Sep 24, 2018
-
-
Eugen Rochko authored
So they can be copied during installation instead of looking them up in the documentation Make default sidekiq configuration use weighted queues Remove deprecated docs directory
-