Commit graph

18 commits

Author SHA1 Message Date
Artik Banana
c645a8de2b Security upgrades:
* Removed TLSv1 and TLSv1.1
* Added OCSP Stapling
* Added SSL Cache
* Changed ciphers
* Specified ECDH curves
2018-06-11 22:56:54 +00:00
a6fd9c4b00 Update pleroma.nginx
proxy_ignore_client_abort will continue to fetch from upstream even if a client aborts the connection. This is highly recommended when cache is being used. If a client leaves/refreshes the page while a user's avatar or some other media is halfway loaded, the cached copy might in some cases be broken. Leaving future requests to the same URL broken until cache expires.
2018-05-28 10:36:27 +00:00
Niklas Poslovski
f0e8194a71 Repair some access-control headers required for third-party webclients 2018-05-23 08:48:28 +02:00
Niklas Poslovski
d81a4e9280
Add access-control-expose-headers to Nginx default config 2018-05-22 15:39:29 +02:00
Artik Banana
0a1fd8adf0 Added headers for a more secure default. 2018-05-06 14:19:29 +00:00
csaurus
1c6a691570 Add info about certbot with the webroot plugin to pleroma.nginx 2018-04-20 18:43:49 -04:00
Hector A. Escobedo
7e262c2997 Fix max upload size in nginx config.
The built-in nginx default does not allow users to upload images
larger than 1 MB. This increases the maximum request size to match
the default Pleroma config upload_limit parameter. Some helpful
comments were also added.
2018-04-08 11:21:29 -04:00
William Pitcock
d8464b603e nginx: document how to enable CORS support 2018-04-01 01:28:27 -05:00
lambda
f8f3abe1be Update pleroma.nginx 2018-03-28 09:34:08 +00:00
lambda
060ac6cb95 Update pleroma.nginx 2018-03-08 18:00:59 +00:00
lambda
46c8f79cd7 Merge branch 'feature/cross-origin' into 'develop'
Access-Control-Allow-Origin

See merge request pleroma/pleroma!52
2018-01-26 23:30:11 +00:00
9c0c40cf1e Access-Control-Allow-Origin 2018-01-26 22:58:58 +00:00
aceef36e56 Correct pleroma.nginx 2018-01-14 10:57:25 +00:00
href
9093b2cf49
Merge remote-tracking branch 'upstream/develop' into media-proxy 2017-12-11 02:45:28 +01:00
href
d1806ec07f
nginx sample config, quickly tested 2017-12-11 02:40:19 +01:00
eal
afd0ea37f3 Add websocket upgrade to example nginx config. 2017-12-07 20:07:51 +02:00
Henry Jameson
a6e89ae6a3 disable sslv3 2017-08-16 00:25:26 +03:00
Henry Jameson
9112eda14f First attempt at installation documentation 2017-08-08 02:41:36 +03:00