Commit Graph

55 Commits

Author SHA1 Message Date
Andrea Dell'Amico 4f758e5d21 library/roles/nginx/templates/nginx-proxy-params.conf.j2: Add a new parameter to work better when keepalive is active. 2017-12-15 19:11:44 +01:00
Andrea Dell'Amico a40456ea1c nginx template: give the possibility to add proxy redirections without including the global proxy configurations. 2017-11-23 17:48:56 +01:00
Andrea Dell'Amico 174b54c9f9 nginx: return 404 when someone tries to access files or directories that start with a . 2017-11-15 01:05:07 +01:00
Andrea Dell'Amico 5556c1318d nginx: fix the creation of the webroot directory. 2017-11-07 12:37:14 +01:00
Andrea Dell'Amico 14f4fc2c08 nginx: create the document root if different from the default. Deny access to the filenames that start with a . 2017-11-07 00:09:01 +01:00
Andrea Dell'Amico 47581ba9ef nginx cors: accept more headers. 2017-10-30 15:41:31 +01:00
Andrea Dell'Amico 6dfaef66d0 nginx: create the directory defined by the variable nginx_client_body_temp_dir, when the variable has been defined. 2017-09-15 12:57:05 +02:00
Tommaso Piccioli fcc48bc005 fix in nginx-cors.conf 2017-09-04 11:57:11 +02:00
Andrea Dell'Amico 0e9276fe23 Fix a typo. 2017-09-01 19:03:56 +02:00
Andrea Dell'Amico 4f2b013b6f nginx: be ready for a stronger ssl configuration. 2017-08-18 15:47:17 +02:00
Andrea Dell'Amico 6c0ebbe18e Revert the nginx_cors_limit_origin defaults. Now it's True. 2017-08-16 18:15:27 +02:00
Andrea Dell'Amico 19518b92b0 library/roles/nginx/templates/nginx-cors.conf.j2: Simplyfy the CORS configuration. 2017-08-16 15:16:03 +02:00
Andrea Dell'Amico 9d88f841a3 Change the CORS snippet again and introduce a new variable so that the smartgears nginx template is now backward compatible and still able to cope with the CORS settings needed by some geoserver. 2017-07-22 15:52:20 +02:00
Andrea Dell'Amico ee0c922ddf Fix a typo in the nginx CORS snippet. 2017-07-22 15:19:44 +02:00
Andrea Dell'Amico 9fe2c4463c Rework the CORS configuration again. Now we can limit the origin and maintain all the other settings. 2017-07-21 18:45:34 +02:00
Andrea Dell'Amico f1b600aefd Changed the CORS configuration to be more liberal when we do not want to restrict it to a list of domains. 2017-07-21 18:40:33 +02:00
Andrea Dell'Amico cd7baca5d8 library/roles/nginx: handle the certificates paths when not using letsencrypt without duplicating files.
d4science-ghn-cluster: cleanup the couchbase web console configuration.
2017-07-03 14:59:38 +02:00
Tommaso Piccioli 2ab3561c55 ssl proxy on couchbase console 2017-06-30 17:29:08 +02:00
Andrea Dell'Amico 6521d90712 library/roles/nginx: Fixes to the generic virtualhost and to the proxy configuration so that all works with nginx installed from the PPA. 2017-03-16 11:42:07 +01:00
Andrea Dell'Amico cf33f2a586 library/roles/nginx: Add tasks that configure the basic authentication. Fix the generic virtualhost template. 2017-02-01 17:12:54 +01:00
Andrea Dell'Amico 0576a0edc5 library/roles/nginx/defaults/main.yml: Decrease the client_max_body_size default. 2016-11-29 09:41:44 +01:00
Andrea Dell'Amico cffd1ce098 library/roles/nginx: Optionally limit CORS access. 2016-11-28 16:45:01 +01:00
Andrea Dell'Amico 64f8947dd5 library/roles/nginx: Add a snippet to enable CORS. 2016-11-28 16:41:56 +01:00
Andrea Dell'Amico 22a64b8965 library/roles/nginx: Permit the customization of the large_client_header_buffers settings. 2016-11-18 11:08:14 +01:00
Andrea Dell'Amico 5c8b31c52a library/roles/nginx/tasks/nginx-virtualhosts.yml: Fix a problem with a new variable that's undefined by default. 2016-11-10 10:26:49 +01:00
Andrea Dell'Amico 6b6fb1c24f library/roles/nginx: More changes to the unified virtualhost template. 2016-11-09 14:28:17 +01:00
Andrea Dell'Amico 731c27cc5b library/roles/nginx/templates/nginx-proxy-params.conf.j2: Some proxy statements must be conditional to the presence of an haproxy load balancer. 2016-10-14 17:24:20 +02:00
Andrea Dell'Amico 667be909a0 library/roles/nginx/tasks/nginx.yml: cache_update only if needed. 2016-10-05 13:19:03 +02:00
Andrea Dell'Amico b4239da6ae library/roles/nginx/templates/nginx-server-ssl.conf.j2: Fix the behaviour when letsencrypt is not installed. 2016-10-03 18:44:18 +02:00
Andrea Dell'Amico b32959ce2c library/roles/nginx: Remove some old installed snipped that can conflict with the new ones. 2016-10-03 18:27:39 +02:00
Andrea Dell'Amico 4a54b1d96f library/roles/nginx/templates: Rename the ssl snippet. 2016-10-03 17:44:44 +02:00
Andrea Dell'Amico 45f5fa6839 library/roles/nginx: Add a ssl snippet. 2016-10-03 16:48:23 +02:00
Andrea Dell'Amico 5cd00da5ec library/roles/nginx/defaults/main.yml: Set the browser cache to 1 month for real. 2016-09-29 09:36:32 +02:00
Andrea Dell'Amico 21dce5d2bf library/roles/nginx/defaults/main.yml: Set the default browser cache for media to 1 month. 2016-09-28 19:27:00 +02:00
Andrea Dell'Amico 272c0eea0d library/roles/nginx: Manage the main configuration file.
library/roles/nginx: Provide parts of embeddable optional configurations inside /etc/nginx/snippets.
2016-09-27 19:33:52 +02:00
Andrea Dell'Amico 978542e261 library/roles/nginx: Add a configuration snippet to support websocket reverse proxy. 2016-09-21 17:54:20 +02:00
Andrea Dell'Amico d6e985159e library/roles/nginx: New parameters to customize the ldap authentication via pam. 2016-07-20 16:10:57 +02:00
Andrea Dell'Amico 78f009ba44 library/roles/nginx/defaults/main.yml: Add examples to enable cors and x-frame-options. 2016-07-14 18:36:45 +02:00
Andrea Dell'Amico 0653dfd8d0 library/roles/nginx: First steps to a unified virtualhost template management. 2016-07-03 12:39:44 +02:00
Andrea Dell'Amico 2e973729e7 library/roles/nginx/tasks/nginx.yml: And fix a typo. 2016-07-03 12:39:44 +02:00
Andrea Dell'Amico c5bdb422ea library/roles/nginx/tasks/nginx.yml: The PPA is ubuntu specific. 2016-07-03 12:39:44 +02:00
Andrea Dell'Amico 88e26ff0f4 library/roles/nginx/tasks/nginx.yml: Add support for the Ubuntu nginx ppa. Disabled by default. 2016-07-03 12:39:44 +02:00
Andrea Dell'Amico 293b71f036 library/roles: Fix all the letsencrypt hook script. We need to use the FQDN hostname. 2016-06-23 14:05:11 +02:00
Andrea Dell'Amico 0864a6219c library/roles/nginx/defaults/main.yml: Fix another typo. 2016-06-21 20:22:20 +02:00
Andrea Dell'Amico 87dbb81f9d library/roles/nginx/defaults/main.yml: Clean up some duplicates. 2016-06-21 19:26:49 +02:00
Andrea Dell'Amico f4f7f5b2bf library/roles/nginx/defaults/main.yml: More variables used inside the nginx virtualhosts. 2016-06-21 19:23:18 +02:00
Andrea Dell'Amico 4892153932 library/roles/nginx/defaults/main.yml: Some new defaults. 2016-06-21 19:11:42 +02:00
Andrea Dell'Amico 39f1bbcef7 infrastructure-services/code-repo.yml: Add letsencrypt to manage the ssl certificates.
library/roles/nginx/templates/letsencrypt-proxy.conf.j2: Fix the nginx config, again.
2016-04-27 18:37:24 +02:00
Andrea Dell'Amico f74f453a09 library/roles/nginx/templates/letsencrypt-proxy.conf.j2: Fix the letsencrypt configuration. 2016-04-27 16:45:09 +02:00
Andrea Dell'Amico 083d71b4d4 library/roles/nginx: letsencrypt hook and configuration for letsencrypt. See https://support.d4science.org/issues/3260. 2016-04-22 18:55:20 +02:00