|
|
155d121da9
|
nginx/site: Use seperate access logs for virtual hosts
|
2021-09-16 16:49:17 +00:00 |
|
|
|
ed538d3371
|
nginx/server: Use combined log format for access log
|
2021-09-16 16:48:57 +00:00 |
|
|
|
005cd1a706
|
nginx/site: Add extra options to registry.foo.sh
|
2021-09-15 17:55:27 +00:00 |
|
|
|
c2e6c0f59d
|
nginx/site: Include extra snippets to template
|
2021-09-15 17:49:55 +00:00 |
|
|
|
6193276604
|
nginx/site: Add support for port in failover backend
|
2021-09-14 16:52:48 +00:00 |
|
|
|
3c4034f80b
|
nginx: Remove deprecated ssl option
|
2021-09-03 15:42:09 +00:00 |
|
|
|
e522ef0e53
|
nginx: Enable TLSv3 for conencting to upstream
|
2021-09-03 15:27:16 +00:00 |
|
|
|
89eec4e1c5
|
nginx/site: Disable certificate check when we have multiple backends
Nginx requires that all backend certificates need to match name defined
in ProxyPass directive:
https://trac.nginx.org/nginx/ticket/1307
|
2021-03-23 15:55:01 +00:00 |
|
|
|
ca3270d89b
|
nginx/server: Use SNI when connecting to backend servers
|
2021-03-22 20:59:03 +00:00 |
|
|
|
147c8d4db5
|
nginx/server: Add plaintext HTTP server support for cert validation
|
2021-03-22 20:35:38 +00:00 |
|
|
|
aed88b417b
|
nginx/server: Verify backend cert when proxying web sites
|
2021-03-22 19:02:10 +00:00 |
|
|
|
fbb64c4fb0
|
nginx/server: Drop xslt module as it's not used anymore
|
2021-03-22 17:09:27 +00:00 |
|
|
|
730cf1ab09
|
nginx: Set hsts headers in proxy level and not in backend
|
2021-03-20 14:29:28 +00:00 |
|
|
|
7febf3bda5
|
nginx/server: Use mozilla recommended ssl settings
|
2021-03-16 22:45:21 +00:00 |
|
|
|
8a5d3cde28
|
nginx/server: Wait for network before starting service
|
2021-03-12 09:11:52 +00:00 |
|
|
|
b2de68ebac
|
Use weak ciphers for boot.foo.sh
iPXE doesn't support modern ciphers so use older ones.
|
2021-02-12 07:12:13 +00:00 |
|
|
|
af061d0083
|
nginx/server: Validate certificate before installing
|
2021-02-12 06:26:25 +00:00 |
|
|
|
f543d599af
|
Tag all certificate and key copying
|
2020-09-28 15:17:26 +00:00 |
|
|
|
3b67903e4f
|
nginx: Configure proxy key/cert globally and not in site
|
2020-09-09 19:55:00 +00:00 |
|
|
|
5d33f46a11
|
nginx/server: Disable chroot on OpenBSD
|
2020-09-09 11:09:22 +00:00 |
|
|
|
f14bb25ade
|
nginx/site: Add support for self signed certs
|
2020-08-27 13:45:19 +03:00 |
|
|
|
e672015a1f
|
nginx: Use alias for certbot host
|
2020-08-27 12:00:28 +03:00 |
|
|
|
9b3bfe9bc8
|
nginx: use mozilla recommended ssl options
|
2019-07-05 10:20:25 +03:00 |
|
|
|
6cd29b72a7
|
nginx: enable http2 protocol
|
2019-07-05 10:20:00 +03:00 |
|
|
|
8920d79078
|
selinux file context fixes for nginx data directories
|
2019-06-11 15:53:55 +03:00 |
|
|
|
b533542b57
|
add support for defining multiple upstream servers for proxy sites
|
2019-06-06 01:56:00 +03:00 |
|
|
|
ddb7ddc71b
|
use fullchain certificates for nginx
|
2019-05-28 01:10:42 +03:00 |
|
|
|
ba0c70532f
|
first version of proxy site for nginx
|
2019-05-27 23:49:38 +03:00 |
|
|
|
d448eb6522
|
no default vars just os family specific
|
2019-05-27 23:15:35 +03:00 |
|
|
|
e95bd87ab5
|
fix nginx/server role for openbsd
|
2019-05-27 22:36:35 +03:00 |
|
|
|
dce83410e4
|
fix selinux context from web root
|
2019-05-22 19:45:32 +03:00 |
|
|
|
8e6db48503
|
require client certificate for incoming connections on backend servers
|
2019-05-20 23:45:09 +03:00 |
|
|
|
de148708a9
|
globally define tls version and ciphers
|
2019-05-20 23:33:40 +03:00 |
|
|
|
04e821116b
|
include mime.types for nginx config
|
2019-05-17 13:01:13 +03:00 |
|
|
|
87744518c7
|
create site directory in /etc/nginx/conf.d
|
2019-05-17 11:36:39 +03:00 |
|
|
|
c2eb946825
|
lint fixes
|
2019-05-17 11:15:26 +03:00 |
|
|
|
e2a20addf3
|
add fastcgi support for nginx
|
2019-05-17 11:14:27 +03:00 |
|
|
|
ae969d9ce3
|
initial version of nginx role
|
2019-05-17 11:00:19 +03:00 |
|
