Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-08-29 | installation/pleroma.nginx: Add 'always' to the security headers, so that ↵ | shibayashi | |
they are included regardless of the status code | |||
2018-08-29 | installation/pleroma-apache.conf: Add TLS configuration and security headers | shibayashi | |
2018-08-29 | installation/pleroma.vcl: Add HTTP security headers | shibayashi | |
2018-08-29 | installation/caddyfile-pleroma.example: Add Content-Security-Policy | shibayashi | |
2018-08-28 | installation/pleroma.nginx: Add Content-Security-Policy | Haelwenn (lanodan) Monnier | |
Closes: https://git.pleroma.social/pleroma/pleroma/issues/266 | |||
2018-08-26 | Improve example Caddyfile | shibayashi | |
2018-08-23 | Add an OpenRC service | vaartis | |
2018-06-16 | Add comment about TLS curves for older servers. | Artik Banana | |
2018-06-13 | * fix nginx 1.15 warning: | dex | |
nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" directive instead | |||
2018-06-11 | * Removed TLSv1 and TLSv1.1 | Artik Banana | |
* Added OCSP Stapling * Added SSL Cache * Changed ciphers * Specified ECDH curves | |||
2018-06-11 | Security upgrades: | Artik Banana | |
* Removed TLSv1 and TLSv1.1 * Added OCSP Stapling * Added SSL Cache * Changed ciphers * Specified ECDH curves | |||
2018-06-03 | caddy config example | witti | |
2018-05-28 | Update pleroma.nginx | Dominik V. Salonen | |
proxy_ignore_client_abort will continue to fetch from upstream even if a client aborts the connection. This is highly recommended when cache is being used. If a client leaves/refreshes the page while a user's avatar or some other media is halfway loaded, the cached copy might in some cases be broken. Leaving future requests to the same URL broken until cache expires. | |||
2018-05-23 | Repair some access-control headers required for third-party webclients | Niklas Poslovski | |
2018-05-22 | Add access-control-expose-headers to Nginx default config | Niklas Poslovski | |
2018-05-13 | Merge branch 'patch-2' into 'develop' | lambda | |
Nginx config - secure defaults See merge request pleroma/pleroma!146 | |||
2018-05-13 | Merge branch 'feld-varnish' into 'develop' | lambda | |
More varnish fixes See merge request pleroma/pleroma!149 | |||
2018-05-11 | Remove alias directive in service file | Normandy | |
Systemd will complain otherwise. | |||
2018-05-07 | Don't strip headers from backend for /notice/ either | Mark Felder | |
2018-05-07 | Caching notice URLs does not produce pleasant results | Mark Felder | |
2018-05-06 | Merge branch 'feld-varnish' into 'develop' | lambda | |
Caching /objects/ URLs breaks them in Mastoweb as they don't redirect to the /notice/ See merge request pleroma/pleroma!110 | |||
2018-05-06 | Added headers for a more secure default. | Artik Banana | |
2018-04-20 | Add info about certbot with the webroot plugin to pleroma.nginx | csaurus | |
2018-04-19 | Remove hack for /about/more as we are doing this in Pleroma now | Mark Felder | |
2018-04-13 | Caching /objects/ URLs breaks them in Mastoweb as they don't redirect to the ↵ | Mark Felder | |
/notice/ Not sure why it matters if you cache it or not. What's different about this JSON blob? Perhaps it's a header that needs to be set for the redirect to happen? | |||
2018-04-10 | Merge branch 'feld-varnish' into 'develop' | lambda | |
Remove attempted caching of toots See merge request pleroma/pleroma!106 | |||
2018-04-10 | Remove attempted caching of toots | Mark Felder | |
This does not work as expected. We should not attempt to be clever here. Varnish will do the right thing if we just teach Pleroma to set headers properly for content we know can be cached. | |||
2018-04-10 | Indentation for Apache vhost | Stanislas | |
2018-04-09 | Merge branch 'develop' into 'develop' | lambda | |
Fix max upload size in nginx config. See merge request pleroma/pleroma!102 | |||
2018-04-08 | Apache config for everything on one host. | nepfag | |
2018-04-08 | Fix max upload size in nginx config. | Hector A. Escobedo | |
The built-in nginx default does not allow users to upload images larger than 1 MB. This increases the maximum request size to match the default Pleroma config upload_limit parameter. Some helpful comments were also added. | |||
2018-04-05 | Delete Caddyfile | lambda | |
It doesn't work correctly. | |||
2018-04-01 | nginx: document how to enable CORS support | William Pitcock | |
2018-03-28 | Update pleroma.nginx | lambda | |
2018-03-20 | Clarify vcl_synth is for all 301s we generate | Mark Felder | |
2018-03-20 | Add ability to PURGE the cache | Mark Felder | |
Someday Pleroma will learn this skill :-) | |||
2018-03-20 | Add example Varnish VCL | Mark Felder | |
2018-03-08 | Update pleroma.nginx | lambda | |
2018-01-30 | Merge branch 'feature/caddyfile' into 'develop' | lambda | |
Add a Caddyfile. See merge request pleroma/pleroma!50 | |||
2018-01-26 | Merge branch 'feature/cross-origin' into 'develop' | lambda | |
Access-Control-Allow-Origin See merge request pleroma/pleroma!52 | |||
2018-01-26 | Access-Control-Allow-Origin | Hakaba Hitoyo | |
2018-01-16 | Add a Caddyfile. | eal | |
2018-01-14 | Correct pleroma.nginx | Hakaba Hitoyo | |
2017-12-11 | Merge remote-tracking branch 'upstream/develop' into media-proxy | href | |
2017-12-11 | nginx sample config, quickly tested | href | |
2017-12-07 | Add websocket upgrade to example nginx config. | eal | |
2017-08-16 | disable sslv3 | Henry Jameson | |
2017-08-08 | First attempt at installation documentation | Henry Jameson | |