Commit graph

70 commits

Author SHA1 Message Date
42d604a921 nginx: Expose status page 2023-11-12 15:53:15 +00:00
4fb04065f9 nginx: Rename nginx/server to nginx 2023-10-14 15:48:51 +00:00
15c612cb3b Rename nginx/server to nginx_server 2023-10-13 16:17:07 +00:00
86d076ebc6 Fix "Forbidden implicit octal value" lint errors 2023-10-12 19:14:54 +00:00
0db76e1481 nginx/server: Update nginx to 1.22 on rhel hosts 2023-10-10 18:47:13 +00:00
0d621444c9 nginx/site: Move static data to static01 2023-09-12 22:16:15 +00:00
4a09185aeb nginx/site: Fix upstream hostname 2023-08-10 13:46:38 +00:00
08fbb13640 nginx: Add more proxy headers 2023-08-09 22:33:10 +00:00
69411beca5 gitea: Increase limit for http request body size 2023-07-21 17:07:13 +00:00
2d01e9c95e nginx/server: Remove deprecated warn otpion 2023-06-18 19:06:52 +00:00
a49bba39f9 Remove custom http log configurations 2023-02-11 19:43:22 +00:00
bfbb54b02c nginx: Add support for proxied websockets 2023-01-29 01:51:13 +00:00
d25e7f51e9 nginx/server: Fix warnings on non OpenBSD hosts 2022-12-13 20:29:37 +00:00
a078b01bdb nginx/server: Fix role for el9 2022-11-06 15:16:00 +00:00
359070aa88 nginx: Fix calling restart handlers 2022-10-30 22:08:06 +00:00
a29a3ad19a nginx: Drop CentOS 7 support 2022-10-30 19:52:59 +00:00
0745d3a635 nginx: ansible-lint fixes 2022-10-30 16:32:45 +00:00
e65fc46d5b nginx/fcgi: Remove unused role 2022-10-30 16:27:12 +00:00
4db2622082 nginx/site: Fix upstream server hostnames
With current OpenBSD SNI negotation fails when hostname is not valid DNS name.
2022-07-13 19:31:31 +00:00
6f12feebc3 nginx/site: Allow using url format for multiple proxies 2022-07-10 14:46:56 +00:00
480681394e Add websocket ssh proxy to dna-gw 2022-03-11 18:19:30 +00:00
69bc7d96f2 Lint fixes 2022-02-25 17:49:50 +00:00
26d92fd306 nginx: Remove some garbage from variable 2022-02-25 17:28:44 +00:00
0702b45dad Lint fixes 2022-02-25 17:03:03 +00:00
3ad436adcd nginx/server: Use 1.20 branch for EL8 hosts 2022-02-03 18:10:02 +00:00
7a2b2c0b48 Re organized internal CA directories 2021-10-07 18:03:05 +00:00
d516a33079 nginx-server: Make logs readable on CentOS 7 2021-09-26 13:14:06 +00:00
855234f77c nginx/server: Fix logs and rotation for CentOS 2021-09-17 16:19:31 +00:00
b51601515e nginx/server: Allow logsync user to copy logfiles 2021-09-16 19:48:44 +00:00
5d8bf1c994 nginx: Add log rotation script and cron job 2021-09-16 17:49:42 +00:00
287e8264fc nginx/server: Disaable system logrotate on OpenBSD 2021-09-16 17:32:25 +00:00
f9f194b3a2 nginx: Set error log level to warn 2021-09-16 17:14:49 +00:00
155d121da9 nginx/site: Use seperate access logs for virtual hosts 2021-09-16 16:49:17 +00:00
ed538d3371 nginx/server: Use combined log format for access log 2021-09-16 16:48:57 +00:00
005cd1a706 nginx/site: Add extra options to registry.foo.sh 2021-09-15 17:55:27 +00:00
c2e6c0f59d nginx/site: Include extra snippets to template 2021-09-15 17:49:55 +00:00
6193276604 nginx/site: Add support for port in failover backend 2021-09-14 16:52:48 +00:00
3c4034f80b nginx: Remove deprecated ssl option 2021-09-03 15:42:09 +00:00
e522ef0e53 nginx: Enable TLSv3 for conencting to upstream 2021-09-03 15:27:16 +00:00
89eec4e1c5 nginx/site: Disable certificate check when we have multiple backends
Nginx requires that all backend certificates need to match name defined
in ProxyPass directive:

https://trac.nginx.org/nginx/ticket/1307
2021-03-23 15:55:01 +00:00
ca3270d89b nginx/server: Use SNI when connecting to backend servers 2021-03-22 20:59:03 +00:00
147c8d4db5 nginx/server: Add plaintext HTTP server support for cert validation 2021-03-22 20:35:38 +00:00
aed88b417b nginx/server: Verify backend cert when proxying web sites 2021-03-22 19:02:10 +00:00
fbb64c4fb0 nginx/server: Drop xslt module as it's not used anymore 2021-03-22 17:09:27 +00:00
730cf1ab09 nginx: Set hsts headers in proxy level and not in backend 2021-03-20 14:29:28 +00:00
7febf3bda5 nginx/server: Use mozilla recommended ssl settings 2021-03-16 22:45:21 +00:00
8a5d3cde28 nginx/server: Wait for network before starting service 2021-03-12 09:11:52 +00:00
b2de68ebac Use weak ciphers for boot.foo.sh
iPXE doesn't support modern ciphers so use older ones.
2021-02-12 07:12:13 +00:00
af061d0083 nginx/server: Validate certificate before installing 2021-02-12 06:26:25 +00:00
f543d599af Tag all certificate and key copying 2020-09-28 15:17:26 +00:00