Commit Graph

  • 144bab1ae7 Remove outdated comment development titanz 2025-04-30 16:01:36 +02:00
  • 6d97b954cb Remove unnecessary commands titanz 2025-04-30 16:00:45 +02:00
  • d6a956eba3 Merge remote-tracking branch 'origin/main' into development titanz 2025-02-10 17:59:11 +01:00
  • 2e9c3ae120 Typo Fixes Tommy 2025-02-10 05:04:27 -07:00
  • 0f0305614b Update robots.txt Matches bebffccc0c/robots.txt Tommy 2025-02-10 04:59:59 -07:00
  • 806ba4f78f shellcheck works now titanz 2025-01-12 22:43:42 +01:00
  • 89899eb577 another test for the runner titanz 2025-01-12 16:40:19 +01:00
  • 10f610096f updated readme titanz 2025-01-12 16:10:32 +01:00
  • 74222c1834 updated readme titanz 2025-01-12 16:09:31 +01:00
  • f083132932 updated gitea action titanz 2025-01-12 15:52:13 +01:00
  • d28691ceed Fix X-Forwarded-For Tommy 2025-01-03 23:50:40 -07:00
  • 6f712a9282 Set-Cookie Tommy 2025-01-03 23:24:33 -07:00
  • 37dcc6ddde Update ssl_early_data configuration Tommy 2025-01-03 23:05:02 -07:00
  • 3b270e4657 Remove hsts.conf from setup.sh Tommy 2025-01-03 10:00:10 -07:00
  • 66e7b66141 Minor reorganization Tommy 2025-01-03 09:58:24 -07:00
  • 2cf70896f7 Merge hsts snippet into security snippet Tommy 2025-01-03 09:57:09 -07:00
  • 6334ef0861 Undo 2e58482 nginx-module-headers-more requires third party repo Tommy 2025-01-03 09:48:56 -07:00
  • 023e2cdad3 Move Access-Control-Max-Age to security.conf Tommy 2025-01-03 09:31:47 -07:00
  • 8293f6f1c3 Typo Fix Tommy 2025-01-03 09:28:46 -07:00
  • 111a568c6e Note X-Frame-Options obsolesence Tommy 2025-01-03 09:28:28 -07:00
  • 65459ad784 Add Access-Control-Max-Age Tommy 2025-01-03 09:22:33 -07:00
  • 1ca56b7039 Add cookie secure flag Tommy 2025-01-03 09:13:14 -07:00
  • 819c0e6372 Add note for credentialless Tommy 2025-01-03 08:22:55 -07:00
  • b52186dcaa Update robots.txt Tommy 2025-01-03 07:34:17 -07:00
  • 71a7618b1c Use strong ciphers for proxies Tommy 2025-01-03 07:22:40 -07:00
  • 662d06a701 Undo 1ade01c - Split HSTS headers again nginx-module-headers-more requires third party repo Tommy 2025-01-03 07:08:15 -07:00
  • a4dd4b6237 Disable gzip Tommy 2025-01-03 06:45:40 -07:00
  • 30d16930fc Remove invalid config Tommy 2025-01-03 06:38:21 -07:00
  • 275d68ce12 Merge default server configs Tommy 2025-01-03 06:34:57 -07:00
  • 1ade01cd11 Merge HSTS headers with TLS config Tommy 2025-01-03 06:27:58 -07:00
  • 2e584825ff Disable sending headers on http Tommy 2025-01-03 06:24:19 -07:00
  • c809ef29b2 Block dangerous X headers Tommy 2025-01-03 06:15:48 -07:00
  • ae27fbb9f7 deleted main branch and nginx file titanz 2025-01-01 07:02:07 +01:00
  • 0dc32f127e first commit titanz 2025-01-01 06:29:34 +01:00
  • dbdd308ffb Add more missing sudos Tommy 2024-12-23 04:36:33 -07:00
  • 1c8ea3f637 Add missing sudo Tommy 2024-12-23 04:34:03 -07:00
  • 8c2de79410 Add mkdir for RHEL compat Tommy 2024-12-22 23:07:25 -07:00
  • edba77ba20 Fix mountpoint Tommy 2024-12-22 22:51:11 -07:00
  • 532df8f908 Update mountpoint name Tommy 2024-12-22 22:48:02 -07:00
  • 5bdbab68b6 Cleanup mountpoint handling Tommy 2024-12-22 22:24:46 -07:00
  • 4cefc6b16c Add nginx-session-ticket-keys mount Tommy 2024-12-22 22:17:27 -07:00
  • c27d4499be Add missing mkdir Tommy 2024-12-22 21:53:26 -07:00
  • cdf3b5858c Typo Fix Tommy 2024-12-22 21:28:46 -07:00
  • 8100f6f770 Change proxy_set_header Host back to $host Tommy 2024-10-21 05:13:09 -07:00
  • 939977d099 Fix posix compliance Tommy 2024-10-13 15:24:14 -07:00
  • 6767e80e38 Rename default.conf to avoid override Tommy 2024-10-13 15:20:42 -07:00
  • f6242ebdfe Fix permissions Tommy 2024-10-13 15:16:28 -07:00
  • 134675cc68 Permission Fix Tommy 2024-10-13 14:52:19 -07:00
  • 5106e34fb6 Add add.txt & disable unnecessary logging Tommy 2024-10-13 14:46:21 -07:00
  • a1708ef12b Update robots.txt Tommy 2024-10-13 14:32:14 -07:00
  • 4408d67d35 Add robots handling Tommy 2024-10-13 13:46:37 -07:00
  • ba554095f1 Add X-Permitted-Cross-Domain-Policies Tommy 2024-10-13 07:33:28 -07:00
  • 11189cffe7 Proper permission policies for WebAuthn Tommy 2024-10-13 07:30:24 -07:00
  • 85ce409081 Remove publickey-credentials-get=() Tommy 2024-10-13 07:27:04 -07:00
  • 59f31c32c6 Add server_token.conf to setup script Tommy 2024-10-13 05:52:20 -07:00
  • 9d671fb07e Disable server_tokens Tommy 2024-10-13 05:49:48 -07:00
  • 1678b0861d Hide X-Powered-By Tommy 2024-10-13 05:15:14 -07:00
  • 89b35004f2 Remove unmaintained sample Tommy 2024-10-13 05:12:17 -07:00
  • fd996d1a02 Remove unnecessary comment Tommy 2024-10-13 03:41:17 -07:00
  • c374b5ef86 Fix listen directives Tommy 2024-10-13 03:32:03 -07:00
  • d938584c21 Add vaultwarden Tommy 2024-10-13 03:30:33 -07:00
  • 2db0611650 Add Nextcloud Tommy 2024-10-13 03:27:54 -07:00
  • 95881525c4 Avoid confusion with proxy_pass Tommy 2024-10-13 02:59:28 -07:00
  • 3bbe3ea3a3 Use http_host for Host Tommy 2024-10-13 01:26:11 -07:00
  • 673f533643 Add extra headers Tommy 2024-10-13 01:25:32 -07:00
  • 7036022071 Use http_host Tommy 2024-10-12 23:54:54 -07:00
  • 3833fd16eb Remove unnecessary OCSP stapling config Tommy 2024-09-26 07:26:02 -07:00
  • d2ea15b130 Add permission control for workflow Tommy 2024-09-10 16:16:01 -07:00
  • d8addd4d0c Update README.md Tommy 2024-09-04 15:00:07 -07:00
  • 2a014e53ba Remove no longer accurate comment Tommy 2024-08-30 10:53:32 -07:00
  • d1a5f7766d Fix restorecon not being on new line Tommy 2024-08-30 10:49:29 -07:00
  • 37d8caf409 Typo Fix Tommy 2024-08-27 09:00:51 -07:00
  • 6b49097447 Typo Fix Tommy 2024-08-01 18:59:24 -07:00
  • 4874077871 Update comments Tommy 2024-08-01 13:56:09 -07:00
  • 8689195fdb Add missing sudo Tommy 2024-08-01 13:22:24 -07:00
  • b6482df91f Support non ip pinning setups Tommy 2024-07-27 15:05:37 -07:00
  • c4014dc57e Suppress curl output Tommy 2024-07-26 07:43:35 -07:00
  • 239bc633c1 Upload nginx-create-session-ticket-keys-ramfs script for RHEL Tommy 2024-07-26 07:40:00 -07:00
  • 7e75518a8b Clean up setup.sh Tommy 2024-07-26 07:26:15 -07:00
  • 470bb0ea04 RHEL is supported Tommy 2024-07-26 07:25:58 -07:00
  • 4e61156e94 Fix certbot-renew override Tommy 2024-07-26 07:16:18 -07:00
  • b5494ec13b Remove certbot OCSP fetcher service Tommy 2024-07-26 07:15:11 -07:00
  • 93f2f91f96 Fix SC2046 Tommy 2024-07-26 07:07:43 -07:00
  • eb39ad2f39 Use realpath for interoperability Tommy 2024-07-26 07:04:05 -07:00
  • faa35bf11b Remove OCSP stapling https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls.html Tommy 2024-07-26 06:52:58 -07:00
  • 6e6b7c3c16 Typo Fix Tommy 2024-07-26 06:41:36 -07:00
  • 95357339af Add set -u Tommy 2024-07-20 18:19:34 -07:00
  • c2e70d17ee Add set -e Tommy 2024-07-05 08:38:51 -07:00
  • b6e13fadb8 Remove restorecon on certbot certonly Tommy 2024-07-03 19:09:34 -07:00
  • 07f2cb7a02 Certbot OCSP fetcher changes have been upstreamed Tommy 2024-06-30 12:46:02 -07:00
  • 5a3ac8cbd7 Miniflux needs form-action 'self' Tommy 2024-06-30 12:37:44 -07:00
  • ab5fb14232 SELinux support for certbot-ocsp-fetcher Tommy 2024-06-29 17:53:27 -07:00
  • b5a6386526 Reorganize Miniflux CSP Tommy 2024-06-29 16:54:37 -07:00
  • e48e0a1096 Add Miniflux Tommy 2024-06-29 14:59:18 -07:00
  • 616669f832 Put reuseport into the default site config Tommy 2024-06-29 14:56:28 -07:00
  • dcd36c9051 Add sample configuration Tommy 2024-06-26 20:58:06 -07:00
  • c09190f5be Typo Fix Tommy 2024-06-26 14:41:06 -07:00
  • 7cfbc5abb8 Ensure correct permissions Tommy 2024-06-26 14:25:56 -07:00
  • 183e414e91 Add cross-origin-security to setup.sh Tommy 2024-06-26 12:26:22 -07:00
  • 08ce46c69e Fix package name Tommy 2024-06-26 11:19:13 -07:00