ISTI-ansible-roles
/
ansible-role-nginx
4
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
52 Commits 1 Branch 0 Tags 174 KiB
Commit Graph

52 Commits

Author SHA1 Message Date
Andrea Dell'Amico c070cba810
Do not change user when downloading locally. 2022-05-01 17:15:12 +02:00
Andrea Dell'Amico e9936c3451
Fix the name of a variable. 2022-05-01 17:12:47 +02:00
Andrea Dell'Amico a5045c6f94
Duplicate option. 2022-05-01 17:07:30 +02:00
Andrea Dell'Amico 84c5073620
Process any remote configuration templates. 2022-05-01 16:49:59 +02:00
Andrea Dell'Amico 3d8f2f46c9
New configuration options for the virtualhost. 2022-05-01 15:36:33 +02:00
Andrea Dell'Amico b6d005a3b5
Fix the nginx ssl cache defaults. 2022-03-03 15:39:11 +01:00
Andrea Dell'Amico 3637b13417
ssl cache: better defaults. 2022-03-01 18:55:05 +01:00
Andrea Dell'Amico 7643a73a84
ssl session cache and timeout are now configurable. 2021-11-18 16:50:28 +01:00
Andrea Dell'Amico 32c68b3a66
Fix the content-security header everywhere. 2021-07-28 17:41:54 +02:00
Andrea Dell'Amico 686d95fefe
Fix a typo. 2021-07-28 17:40:04 +02:00
Andrea Dell'Amico c0082ac433
Better handling of the security headers. 2021-07-28 17:37:54 +02:00
Andrea Dell'Amico baacf6b924
Undefine X-Frame-Options before setting it. 2021-07-28 17:25:18 +02:00
Andrea Dell'Amico b110431218
Fix the xss syntax. 2021-07-28 15:11:26 +02:00
Andrea Dell'Amico 4ec5bddf14
self and none must be put inside '' 2021-07-28 15:02:08 +02:00
Andrea Dell'Amico a8ece37a3a
Do not quote the domains in the security options. 2021-07-28 14:35:12 +02:00
Andrea Dell'Amico 71a7fc437a
Handle some security settings. 2021-07-28 14:18:03 +02:00
Andrea Dell'Amico e538066bf4
Optionally include subdomains in transport security. 2021-07-28 13:36:31 +02:00
Andrea Dell'Amico 61e6de8a06
Fix a typo. 2021-07-07 15:29:44 +02:00
Andrea Dell'Amico e50eaa0662
Wrong conditional. 2021-07-07 14:25:05 +02:00
Andrea Dell'Amico e4420f6a66
Wrong variable name. 2021-07-07 14:19:44 +02:00
Andrea Dell'Amico 119a8578ec
syntax cleanup. 2021-07-07 14:10:08 +02:00
Andrea Dell'Amico 71e3a948c6
Optionally manage a robots.txt file. 2021-07-07 14:03:33 +02:00
Andrea Dell'Amico 22aa4d1430
Fix the check on nginx_proxy_define_header_host. 2021-05-29 12:40:14 +02:00
Andrea Dell'Amico c301a2b1a1
nginx_com -> nginx_org 2021-05-29 12:01:21 +02:00
Andrea Dell'Amico 1cc1f240bb
nginx_proxy_define_header_host 2021-05-28 19:00:52 +02:00
Andrea Dell'Amico db109326d8
Support the nginx.org PPA and its modules. 2021-05-27 19:41:22 +02:00
Andrea Dell'Amico 44ce326600
Upstream servers must be in the virtualhost vars. 2021-05-09 17:39:18 +02:00
Andrea Dell'Amico 1f4510181e
upstream backends in the virtualhost template. 2021-05-09 16:54:56 +02:00
Andrea Dell'Amico 437d0a0b1e
Limit the entries skipped by nginx_behind_haproxy_settings 2021-05-03 19:10:21 +02:00
Andrea Dell'Amico fdd0fcfb9e
The proxy setting when behind haproxy are now optional. 2021-05-03 19:01:37 +02:00
Andrea Dell'Amico 82d5cc2ab9 php proxy: use the unix socket when required. 2021-03-20 19:24:19 +01:00
Andrea Dell'Amico e794618adc Fix the conditional for proxy_force_ranges 2021-02-22 11:49:48 +01:00
Andrea Dell'Amico a2deb6bb15 Old nginx versions do not have proxy_force_ranges. 2021-02-22 11:42:25 +01:00
Andrea Dell'Amico e5df96b4b4 Fix a typo. 2021-02-18 18:54:12 +01:00
Andrea Dell'Amico 33514421bf Differentiate between buffers and proxy_buffers. 2021-02-18 18:50:29 +01:00
Andrea Dell'Amico 49b2a81661 Another attempt to fix the buffers size. 2021-02-18 18:12:42 +01:00
Andrea Dell'Amico bcbcf4d7f4 The buffer size is an int. 2021-02-18 18:09:55 +01:00
Andrea Dell'Amico f442ad600b Fix a typo 2021-02-18 18:05:28 +01:00
Andrea Dell'Amico c5e7dd7dd4 Try to fix the buffers size. 2021-02-18 18:02:20 +01:00
Andrea Dell'Amico c0f9bfa6a3 Add nginx_proxy_force_ranges. Required to stream .mp4 files on iOS devices. 2020-11-24 17:29:07 +01:00
Andrea Dell'Amico b256e76017 Actually enable the gzip compression when told. 2020-10-28 19:04:44 +01:00
Andrea Dell'Amico 7e53ab855b do not block the .well-known urls, for real 2020-10-20 14:52:36 +02:00
Andrea Dell'Amico f8cd042975 Do not block the .well-known urls 2020-10-20 14:45:27 +02:00
Andrea Dell'Amico 842398b69f Manage the httpd_can_network_relay SELinux boolean. 2020-08-04 16:34:42 +02:00
Andrea Dell'Amico f9661dba71 Fix the httpd_setrlimit value. 2020-08-04 16:24:06 +02:00
Andrea Dell'Amico 603518e5bd On EL, enable httpd_setrlimit. 2020-08-03 15:16:10 +02:00
Andrea Dell'Amico 69ec1e9dde Manage the 'httpd_can_network_connect' seboolean on EL. 2020-07-31 12:33:22 +02:00
Andrea Dell'Amico 9ea3a30b9f nginx: enable http2 when the OS supports it. 2020-07-21 15:59:24 +02:00
Andrea Dell'Amico 6197662fee The x-forwarded-host proxy setting must be configurable. 2020-06-20 00:50:42 +02:00
Andrea Dell'Amico 494ed77f8b Manage some logrotate options. 2020-06-09 14:44:21 +02:00