 Felix Stupp
|
8ebe8aecfb
|
nginx/application: Hide server tokens per default
|
5 years ago |
|
Felix Stupp
|
e2b7778c8b
|
nginx/application: Changed Referrer-Policy to strict-origin
For better enforcing of secure handling of referrer information
|
5 years ago |
|
Felix Stupp
|
1855deb351
|
nginx/server: Documentated required variables
|
5 years ago |
|
Felix Stupp
|
8b75c49917
|
nginx/proxy: Made dependent on nginx/server and allowed additional directives
|
5 years ago |
|
Felix Stupp
|
fb0c1f0901
|
Changed "ansible_fqdn" to "inventory_hostname"
Due to some hosts misconfigure fqdn themselves
|
5 years ago |
|
Felix Stupp
|
9c63c8516b
|
nginx/application: Disabled SSL Session Tickets
|
5 years ago |
|
Felix Stupp
|
409ea327f0
|
nginx/application: Increased ssl_cache timeout
|
5 years ago |
|
Felix Stupp
|
b9f060a0ce
|
nginx/php-fpm: Added installation of apcu cache
|
5 years ago |
|
Felix Stupp
|
7df2668208
|
nginx/php-fpm: Increased size of opcache memory consumption to 256
|
5 years ago |
|
Felix Stupp
|
206c940d16
|
nginx/php-pool: Tuned up childs at php
|
5 years ago |
|
Felix Stupp
|
fc897ea3b9
|
nginx/application: Fixed configuring resolver for OCSP Stapling
|
5 years ago |
|
Felix Stupp
|
03884cbf3e
|
nginx/server: Allowed duplicates of role
|
5 years ago |
|
Felix Stupp
|
edf455bf66
|
nginx/application: Allowed dot files uploads by Nextcloud
|
5 years ago |
|
Felix Stupp
|
c21ee11c66
|
nginx/application: Blocked all hidden directories except well-known
|
5 years ago |
|
Felix Stupp
|
502606b1e3
|
nginx/application: Set type to text for test file
|
5 years ago |
|
Felix Stupp
|
57e422b478
|
nginx/application: Disabled access_log on acme requests
|
5 years ago |
|
Felix Stupp
|
8e28bcb0ec
|
Added role nginx/php
|
5 years ago |
|
Felix Stupp
|
72e7857570
|
nginx/php-pool: Locked reading of php-pool configurations
|
5 years ago |
|
Felix Stupp
|
3414e3fd85
|
nginx/php-pool: Changed group of src directory to nginx user
|
5 years ago |
|
Felix Stupp
|
4f1fdf72c7
|
nginx/php-pool: Added support for env variables
|
5 years ago |
|
Felix Stupp
|
133d82e0bb
|
nginx/proxy: Added doc for var upstream_name
|
5 years ago |
|
Felix Stupp
|
bcfd4cb010
|
Fixed missing mode setting for others
To disallow access from others than user and group
|
5 years ago |
|
Felix Stupp
|
a3fde6aa3c
|
acme: Moved certificate handling to custom system user
Avoided using root for acme.sh
Modified also role nginx/application
|
5 years ago |
|
Felix Stupp
|
002ecc28b0
|
nginx/php-pool: Removed not needed system user configuration
|
5 years ago |
|
Felix Stupp
|
5486d06226
|
nginx/php-fpm: Fixed removing default php-fpm pool
|
5 years ago |
|
Felix Stupp
|
964099cfdb
|
nginx/php-fpm: Added configuration for php opcache
|
5 years ago |
|
Felix Stupp
|
852dbdb143
|
php-pool: Added domain to required variables (doc-only)
|
5 years ago |
|
Felix Stupp
|
029fba1983
|
nginx/php-pool: Added support for custom memory_limit
|
5 years ago |
|
Felix Stupp
|
a0000e3c7f
|
nginx/php*: Fixed handler names for controlling php-fpm service
|
5 years ago |
|
Felix Stupp
|
ce90f3dadf
|
nginx/php-fpm: Fixed getting php-fpm for newer versions of Debian
|
5 years ago |
|
Felix Stupp
|
9ba13c5d73
|
nginx/application: Enabled OCSP Stapling
|
5 years ago |
|
Felix Stupp
|
22f14189c2
|
nginx/application: Enabled TLSv1.3 and reworked ciphers
|
5 years ago |
|
Felix Stupp
|
ce1f2fb132
|
nginx/application: Increased time for HSTS
|
5 years ago |
|
Felix Stupp
|
5bed7d067a
|
nginx/application: Added localhost as resolver for nginx
|
5 years ago |
|
Felix Stupp
|
d9eb74649f
|
nginx/application: Fixed missing notify for templates
|
5 years ago |
|
Felix Stupp
|
0bec0a9630
|
Added role nginx/server
|
5 years ago |
|
Felix Stupp
|
3f19422c0c
|
Added role nginx/php-pool
|
5 years ago |
|
Felix Stupp
|
692b9bf74b
|
Added role nginx/php-fpm
For php-fpm setup
|
5 years ago |
|
Felix Stupp
|
f85d1a4477
|
roles/nginx/forward: nginx configuration "redirect" -> "return"
|
6 years ago |
|
Felix Stupp
|
d938fdfb39
|
roles/nginx/forward: Fixed name of configuration template
|
6 years ago |
|
Felix Stupp
|
7d8be15582
|
roles/nginx/proxy: Reworked proxy to adapt to upstreams
|
6 years ago |
|
Felix Stupp
|
bdf96b6eeb
|
roles/nginx/static added
|
6 years ago |
|
Felix Stupp
|
309d23ba8a
|
roles/nginx: Reworked upstreams
|
6 years ago |
|
Felix Stupp
|
6c310a8f3d
|
roles/nginx/application: Set allow_duplicates to false
|
6 years ago |
|
Felix Stupp
|
6b376cacfa
|
roles/nginx/application: Added snippets acme and root
|
6 years ago |
|
Felix Stupp
|
da676ebc32
|
roles/nginx/application: Included upstreams directory
|
6 years ago |
|
Felix Stupp
|
7e56f8ada5
|
roles/nginx/application: Fixed global forwarding to https
|
6 years ago |
|
Felix Stupp
|
097ff3d743
|
roles/nginx/application: Fixed nginx variable configuration
|
6 years ago |
|
Felix Stupp
|
5676165f1c
|
roles/nginx/application: Fixed configuration for global logs
|
6 years ago |
|
Felix Stupp
|
d80261fe53
|
roles/nginx/application: Added validation for nginx.conf
|
6 years ago |