45 Commits (9fa36a210f2e11a07c6fddf9676f537300857871)

Author SHA1 Message Date
Felix Stupp 36da702163
nginx/application: Disable log for HTTPs forwarding 4 years ago
Felix Stupp 5c374bc977
nginx/application: Added security relevant HTTP headers to global config
Duplicates removed from server/nextcloud
4 years ago
Felix Stupp 9d8d041241
nginx/application: Fixed typo of "unnecessary" 4 years ago
Felix Stupp 7a33ceffb8
nginx/application: Removed configuring trusted certificate for OCSP
Can be derived by given certificate for host
4 years ago
Felix Stupp 12e47c19c9
all/vars: Added var global_log_directory
Added usage in role nginx/application
5 years ago
Felix Stupp 08a37c6dab
nginx/application: Configure dhparams for SSL 5 years ago
Felix Stupp debbcb1a1b
nginx: Moved dot-file-exclution from global snippet to root snippet
Only file based servers may require this directive,
other servers are not expected to leak hidden files other than on purpose
5 years ago
Felix Stupp f2c92e94e2
nginx: Moved index directive from root snippet to specific static role 5 years ago
Felix Stupp 58955871ad
nginx/application: Removed specfic exclusion of htaccess files
Because dot files are already blocked in general
5 years ago
Felix Stupp 0043d6255a
nginx/application global.conf: Added comment to excluding hidden files 5 years ago
Felix Stupp 2dcfd1b09e
nginx: Added full paths to includes of snippets / fastcgi_params
To allow Ansible to validate the main config if placed on different
locations
5 years ago
Felix Stupp 8ebe8aecfb
nginx/application: Hide server tokens per default 5 years ago
Felix Stupp e2b7778c8b
nginx/application: Changed Referrer-Policy to strict-origin
For better enforcing of secure handling of referrer information
5 years ago
Felix Stupp fb0c1f0901
Changed "ansible_fqdn" to "inventory_hostname"
Due to some hosts misconfigure fqdn themselves
5 years ago
Felix Stupp 9c63c8516b
nginx/application: Disabled SSL Session Tickets 5 years ago
Felix Stupp 409ea327f0
nginx/application: Increased ssl_cache timeout 5 years ago
Felix Stupp fc897ea3b9
nginx/application: Fixed configuring resolver for OCSP Stapling 5 years ago
Felix Stupp edf455bf66
nginx/application: Allowed dot files uploads by Nextcloud 5 years ago
Felix Stupp c21ee11c66
nginx/application: Blocked all hidden directories except well-known 5 years ago
Felix Stupp 502606b1e3
nginx/application: Set type to text for test file 5 years ago
Felix Stupp 57e422b478
nginx/application: Disabled access_log on acme requests 5 years ago
Felix Stupp a3fde6aa3c
acme: Moved certificate handling to custom system user
Avoided using root for acme.sh
Modified also role nginx/application
5 years ago
Felix Stupp 9ba13c5d73
nginx/application: Enabled OCSP Stapling 5 years ago
Felix Stupp 22f14189c2
nginx/application: Enabled TLSv1.3 and reworked ciphers 5 years ago
Felix Stupp ce1f2fb132
nginx/application: Increased time for HSTS 5 years ago
Felix Stupp 5bed7d067a
nginx/application: Added localhost as resolver for nginx 5 years ago
Felix Stupp d9eb74649f
nginx/application: Fixed missing notify for templates 5 years ago
Felix Stupp 6c310a8f3d
roles/nginx/application: Set allow_duplicates to false 6 years ago
Felix Stupp 6b376cacfa
roles/nginx/application: Added snippets acme and root 6 years ago
Felix Stupp da676ebc32
roles/nginx/application: Included upstreams directory 6 years ago
Felix Stupp 7e56f8ada5
roles/nginx/application: Fixed global forwarding to https 6 years ago
Felix Stupp 097ff3d743
roles/nginx/application: Fixed nginx variable configuration 6 years ago
Felix Stupp 5676165f1c
roles/nginx/application: Fixed configuration for global logs 6 years ago
Felix Stupp d80261fe53
roles/nginx/application: Added validation for nginx.conf 6 years ago
Felix Stupp 007c7ed2a4
roles/nginx/application: Fixed task names containing item keyword 6 years ago
Felix Stupp 226bc9c873
Reconfigured nginx / acme validation handling 6 years ago
Felix Stupp 7122bcf9e3
nginx/application: Enabled acme verification for all over http 6 years ago
Felix Stupp facee1a61d
nginx/application: Extracted acme snippets from global 6 years ago
Felix Stupp d08159eb24
nginx/application: Removed duplicated ssl configuration 6 years ago
Felix Stupp b49a832759
nginx/application: Added rules for firewall 6 years ago
Felix Stupp 2186137327
nginx/application: Used vars in nginx.conf 6 years ago
Felix Stupp 7a84ae4fdc
nginx/application: Fixed uploading and including snippets 6 years ago
Felix Stupp 6a6e2f6602
Moved dependency of certificate validation directory to nginx role 6 years ago
Felix Stupp 01fafa5ca1
nginx: Reworked global ssl and https configuration 6 years ago
Felix Stupp 08ebc2f5cb
Added role nginx/application 6 years ago