Tommy
|
2cf70896f7
|
Merge hsts snippet into security snippet
|
2025-01-03 09:57:09 -07:00 |
|
Tommy
|
6334ef0861
|
Undo 2e58482
nginx-module-headers-more requires third party repo
|
2025-01-03 09:48:56 -07:00 |
|
Tommy
|
023e2cdad3
|
Move Access-Control-Max-Age to security.conf
|
2025-01-03 09:31:47 -07:00 |
|
Tommy
|
8293f6f1c3
|
Typo Fix
|
2025-01-03 09:28:46 -07:00 |
|
Tommy
|
111a568c6e
|
Note X-Frame-Options obsolesence
|
2025-01-03 09:28:28 -07:00 |
|
Tommy
|
65459ad784
|
Add Access-Control-Max-Age
|
2025-01-03 09:22:33 -07:00 |
|
Tommy
|
1ca56b7039
|
Add cookie secure flag
Signed-off-by: Tommy <contact@tommytran.io>
|
2025-01-03 09:13:14 -07:00 |
|
Tommy
|
819c0e6372
|
Add note for credentialless
|
2025-01-03 08:22:55 -07:00 |
|
Tommy
|
b52186dcaa
|
Update robots.txt
|
2025-01-03 07:34:17 -07:00 |
|
Tommy
|
71a7618b1c
|
Use strong ciphers for proxies
|
2025-01-03 07:22:40 -07:00 |
|
Tommy
|
662d06a701
|
Undo 1ade01c - Split HSTS headers again
nginx-module-headers-more requires third party repo
|
2025-01-03 07:08:15 -07:00 |
|
Tommy
|
a4dd4b6237
|
Disable gzip
|
2025-01-03 06:45:40 -07:00 |
|
Tommy
|
30d16930fc
|
Remove invalid config
|
2025-01-03 06:38:21 -07:00 |
|
Tommy
|
275d68ce12
|
Merge default server configs
|
2025-01-03 06:34:57 -07:00 |
|
Tommy
|
1ade01cd11
|
Merge HSTS headers with TLS config
|
2025-01-03 06:27:58 -07:00 |
|
Tommy
|
2e584825ff
|
Disable sending headers on http
Signed-off-by: Tommy <contact@tommytran.io>
|
2025-01-03 06:24:19 -07:00 |
|
Tommy
|
c809ef29b2
|
Block dangerous X headers
|
2025-01-03 06:15:48 -07:00 |
|
Tommy
|
dbdd308ffb
|
Add more missing sudos
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-12-23 04:36:33 -07:00 |
|
Tommy
|
1c8ea3f637
|
Add missing sudo
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-12-23 04:34:03 -07:00 |
|
Tommy
|
8c2de79410
|
Add mkdir for RHEL compat
|
2024-12-22 23:07:25 -07:00 |
|
Tommy
|
edba77ba20
|
Fix mountpoint
|
2024-12-22 22:51:11 -07:00 |
|
Tommy
|
532df8f908
|
Update mountpoint name
|
2024-12-22 22:48:02 -07:00 |
|
Tommy
|
5bdbab68b6
|
Cleanup mountpoint handling
|
2024-12-22 22:24:46 -07:00 |
|
Tommy
|
4cefc6b16c
|
Add nginx-session-ticket-keys mount
|
2024-12-22 22:17:27 -07:00 |
|
Tommy
|
c27d4499be
|
Add missing mkdir
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-12-22 21:53:26 -07:00 |
|
Tommy
|
cdf3b5858c
|
Typo Fix
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-12-22 21:28:46 -07:00 |
|
Tommy
|
8100f6f770
|
Change proxy_set_header Host back to $host
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-10-21 05:13:09 -07:00 |
|
Tommy
|
939977d099
|
Fix posix compliance
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-10-13 15:24:14 -07:00 |
|
Tommy
|
6767e80e38
|
Rename default.conf to avoid override
|
2024-10-13 15:20:42 -07:00 |
|
Tommy
|
f6242ebdfe
|
Fix permissions
|
2024-10-13 15:16:28 -07:00 |
|
Tommy
|
134675cc68
|
Permission Fix
|
2024-10-13 14:52:19 -07:00 |
|
Tommy
|
5106e34fb6
|
Add add.txt & disable unnecessary logging
|
2024-10-13 14:46:21 -07:00 |
|
Tommy
|
a1708ef12b
|
Update robots.txt
|
2024-10-13 14:32:14 -07:00 |
|
Tommy
|
4408d67d35
|
Add robots handling
|
2024-10-13 13:46:37 -07:00 |
|
Tommy
|
ba554095f1
|
Add X-Permitted-Cross-Domain-Policies
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-10-13 07:33:28 -07:00 |
|
Tommy
|
11189cffe7
|
Proper permission policies for WebAuthn
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-10-13 07:30:24 -07:00 |
|
Tommy
|
85ce409081
|
Remove publickey-credentials-get=()
FIDO2 is used almost everywhere now
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-10-13 07:27:04 -07:00 |
|
Tommy
|
59f31c32c6
|
Add server_token.conf to setup script
|
2024-10-13 05:52:20 -07:00 |
|
Tommy
|
9d671fb07e
|
Disable server_tokens
|
2024-10-13 05:49:48 -07:00 |
|
Tommy
|
1678b0861d
|
Hide X-Powered-By
|
2024-10-13 05:15:14 -07:00 |
|
Tommy
|
89b35004f2
|
Remove unmaintained sample
|
2024-10-13 05:12:17 -07:00 |
|
Tommy
|
fd996d1a02
|
Remove unnecessary comment
|
2024-10-13 03:41:17 -07:00 |
|
Tommy
|
c374b5ef86
|
Fix listen directives
|
2024-10-13 03:32:03 -07:00 |
|
Tommy
|
d938584c21
|
Add vaultwarden
|
2024-10-13 03:30:33 -07:00 |
|
Tommy
|
2db0611650
|
Add Nextcloud
|
2024-10-13 03:27:54 -07:00 |
|
Tommy
|
95881525c4
|
Avoid confusion with proxy_pass
|
2024-10-13 02:59:28 -07:00 |
|
Tommy
|
3bbe3ea3a3
|
Use http_host for Host
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-10-13 01:26:11 -07:00 |
|
Tommy
|
673f533643
|
Add extra headers
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-10-13 01:25:32 -07:00 |
|
Tommy
|
7036022071
|
Use http_host
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-10-12 23:54:54 -07:00 |
|
Tommy
|
3833fd16eb
|
Remove unnecessary OCSP stapling config
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-09-26 07:26:02 -07:00 |
|