pleroma

Commit Graph

Автор	SHA1	Съобщение	Дата
Alfie Pates	356c047759	explicitly set reverse proxy upstream to IPv4 since Pleroma.Web.Endpoint binds on IPv4 only and `localhost.` resolves to [::0] on some systems fixes #930.	преди 5 години
Dominik V. Salonen	498c96d458	Add supervisord configuration	преди 5 години
Haelwenn (lanodan) Monnier	378b964d8e	installation/download-mastofe-build.sh: Add copyright header [ci skip]	преди 5 години
Haelwenn (lanodan) Monnier	b421dd3dd2	installation/download-mastofe-build.sh: Add mastofe CI-artifacts download [ci skip]	преди 5 години
Horsemans	10a9682596	ssl_trusted_certificate should point to chain.pem if we're demonstrating LetsEncrypt: https://community.letsencrypt.org/t/howto-ocsp-stapling-for-nginx/13611/5	преди 5 години
Kenneth Zhao	e1bdaaa3fe	need to put back ipv4 listen instruct	преди 5 години
PEA	d3a6c065a4	Add ipv6 handling to pleroma.nginx Replaces `listen 80` with `listen [::]:80`, same with 443	преди 5 години
faried nawaz	c75e643a72	apache config: add instructions for mediaproxy.	преди 5 години
shibayashi	d1752a81a8	Update service files of OpenRC and systemd to new recommended paths	преди 5 години
shibayashi	1d8b578bb7	Recommend the acme-challenge path that is used in the installation guides	преди 5 години
shibayashi	e868cfe619	Add /media to Caddy cache	преди 5 години
vaartis	9e43a28bc3	Update the openrc service's retry with the correct format	преди 5 години
shibayashi	2a818a3e77	Add comments and change default path of the Mix binary.	преди 5 години
Mark Felder	cc3a83a730	Fix nginx caching issues Nginx is currently not caching data because proxy_buffering needs to be enabled for caching to work at all, and we are receiving a Cache-Control header from Pleroma that states "max-age=0, private, must-revalidate" Even disregarding the Cache-Control header that should actually be set to "public, max-age=1209600" as defined in the reverse_proxy code, we don't want to obey this header at all as it overrides our Nginx caching rules.	преди 5 години
Mark Felder	efaa41fad2	Consistent intentation	преди 5 години
Mark Felder	fda942c329	Cache partial objects for 10 minutes This enables caching/streaming of chunked responses	преди 5 години
Mark Felder	ce224ba5f0	Streaming is enabled by default Support more filetypes for caching static media	преди 5 години
shibayashi	64035201b5	Security/Drops the sysadmin privilege from the daemon	преди 5 години
scarlett	4b40e4188c	Simplify the NetBSD rc script.	преди 5 години
scarlett	9d3eda1959	Add an rc.d script for NetBSD.	преди 5 години
nonlinear	75f2177d5b	Update/add OpenBSD config files	преди 5 години
nonlinear	04513a13e0	Added init file for OpenBSD	преди 5 години
Mark Felder	d56772c813	proxy buffering still needs to be off	преди 5 години
Mark Felder	48c4f88ffd	Update proxy config to improve behavior and allow compatibility with Safari on MacOS and iOS	преди 5 години
href	97b00d366f	reverse_proxy: more headers	преди 5 години
shibayashi	124a9bb7a5	Add MIX_ENV=prod	преди 5 години
William Pitcock	e4bd5a6950	example configs: kill STS/CT headers	преди 5 години
William Pitcock	057a9017b3	example configs: remove obsolete CSP configuration	преди 5 години
William Pitcock	fd918863aa	nginx example config: remove CORS headers, now managed by CORSPlug.	преди 5 години
Hakaba Hitoyo	3ea4f9ac8d	Remove Access-Control-Allow-Origin	преди 5 години
shibayashi	800d233631	Use example.tld so a single search and replace works	преди 5 години
shibayashi	941f9a888c	Update instructions	преди 5 години
shibayashi	732d3fce73	Use the same example domain in all config examples	преди 5 години
shibayashi	56c49513e0	Use the server name as variable	преди 5 години
shibayashi	043cb7138e	Add a little bit more detail in the comments.	преди 5 години
shibayashi	0a58428de6	Add some security related directives to the systemd service example	преди 5 години
barrucadu	a32e013909	Relax form-action content security policy 'self' only allows forms submitted to the same origin, which breaks the "remote follow" form. To allow remote following, we want to allow forms to be submitted to any host.	преди 5 години
shibayashi	8a4e2f48bf	installation/pleroma-apache.conf: OCSP stapling needs to be outside of the virtualhost directive	преди 5 години
shibayashi	d027c53d75	Add frame-ancestors 'none' to all configs	преди 5 години
shibayashi	d035566116	installation/pleroma.nginx: Add 'always' to the security headers, so that they are included regardless of the status code	преди 5 години
shibayashi	64388c420a	installation/pleroma-apache.conf: Add TLS configuration and security headers	преди 5 години
shibayashi	3487e15963	installation/pleroma.vcl: Add HTTP security headers	преди 5 години
shibayashi	82e661cd07	installation/caddyfile-pleroma.example: Add Content-Security-Policy	преди 5 години
Haelwenn (lanodan) Monnier	0fd2eaf7af	installation/pleroma.nginx: Add Content-Security-Policy Closes: https://git.pleroma.social/pleroma/pleroma/issues/266	преди 5 години
shibayashi	bff5ed154f	Improve example Caddyfile	преди 5 години
vaartis	9c5ca9e15e	Add an OpenRC service	преди 5 години
Artik Banana	394d0c94c4	Add comment about TLS curves for older servers.	преди 6 години
dex	750cfbf38d	* fix nginx 1.15 warning: nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" directive instead	преди 6 години
Artik Banana	93c614bf13	* Removed TLSv1 and TLSv1.1 * Added OCSP Stapling * Added SSL Cache * Changed ciphers * Specified ECDH curves	преди 6 години
Artik Banana	c645a8de2b	Security upgrades: * Removed TLSv1 and TLSv1.1 * Added OCSP Stapling * Added SSL Cache * Changed ciphers * Specified ECDH curves	преди 6 години

1 2

93 Ревизии (4e45f7bc878638b37225aadcdee547a11d280963)