d035566116
installation/pleroma.nginx: Add 'always' to the security headers, so that they are included regardless of the status code
2018-08-29 19:00:40 +02:00
0fd2eaf7af
installation/pleroma.nginx: Add Content-Security-Policy
...
Closes: https://git.pleroma.social/pleroma/pleroma/issues/266
2018-08-28 20:54:50 +02:00
394d0c94c4
Add comment about TLS curves for older servers.
2018-06-16 18:14:05 +00:00
750cfbf38d
* fix nginx 1.15 warning:
...
nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" directive instead
2018-06-13 09:54:23 +00:00
93c614bf13
* Removed TLSv1 and TLSv1.1
...
* Added OCSP Stapling
* Added SSL Cache
* Changed ciphers
* Specified ECDH curves
2018-06-11 23:01:14 +00:00
c645a8de2b
Security upgrades:
...
* Removed TLSv1 and TLSv1.1
* Added OCSP Stapling
* Added SSL Cache
* Changed ciphers
* Specified ECDH curves
2018-06-11 22:56:54 +00:00
a6fd9c4b00
Update pleroma.nginx
...
proxy_ignore_client_abort will continue to fetch from upstream even if a client aborts the connection. This is highly recommended when cache is being used. If a client leaves/refreshes the page while a user's avatar or some other media is halfway loaded, the cached copy might in some cases be broken. Leaving future requests to the same URL broken until cache expires.
2018-05-28 10:36:27 +00:00
f0e8194a71
Repair some access-control headers required for third-party webclients
2018-05-23 08:48:28 +02:00
d81a4e9280
Add access-control-expose-headers to Nginx default config
2018-05-22 15:39:29 +02:00
0a1fd8adf0
Added headers for a more secure default.
2018-05-06 14:19:29 +00:00
1c6a691570
Add info about certbot with the webroot plugin to pleroma.nginx
2018-04-20 18:43:49 -04:00
7e262c2997
Fix max upload size in nginx config.
...
The built-in nginx default does not allow users to upload images
larger than 1 MB. This increases the maximum request size to match
the default Pleroma config upload_limit parameter. Some helpful
comments were also added.
2018-04-08 11:21:29 -04:00
d8464b603e
nginx: document how to enable CORS support
2018-04-01 01:28:27 -05:00
f8f3abe1be
Update pleroma.nginx
2018-03-28 09:34:08 +00:00
060ac6cb95
Update pleroma.nginx
2018-03-08 18:00:59 +00:00
46c8f79cd7
Merge branch 'feature/cross-origin' into 'develop'
...
Access-Control-Allow-Origin
See merge request pleroma/pleroma!52
2018-01-26 23:30:11 +00:00
9c0c40cf1e
Access-Control-Allow-Origin
2018-01-26 22:58:58 +00:00
aceef36e56
Correct pleroma.nginx
2018-01-14 10:57:25 +00:00
9093b2cf49
Merge remote-tracking branch 'upstream/develop' into media-proxy
2017-12-11 02:45:28 +01:00
d1806ec07f
nginx sample config, quickly tested
2017-12-11 02:40:19 +01:00
afd0ea37f3
Add websocket upgrade to example nginx config.
2017-12-07 20:07:51 +02:00
a6e89ae6a3
disable sslv3
2017-08-16 00:25:26 +03:00
9112eda14f
First attempt at installation documentation
2017-08-08 02:41:36 +03:00
shibayashi