Commit Graph

203 Commits

Author SHA1 Message Date
Cătălin Mariș 8510caa5c6 Add missing semicolons in `ssl.example.com`
Close h5bp/server-configs-nginx#52.
2014-08-07 15:01:30 +03:00
Drew Hammond d8891a1b4c Remove gzip_http_version parameter
The gzip_http_version override is no longer needed because CloudFront
now forwards requests using HTTP/1.1. We can remove this line entirely
and let nginx use its default value of 1.1.
2014-07-31 22:48:09 -04:00
AD7six fc610f495a Merge branch 'feature/split-ssl'
Add ssl config from istlsfastyet.com

Some doc changes needed, but this includes all of the config changes

Closes #44
2014-07-28 15:01:30 +00:00
AD7six 332998a2db use a much longer ssl_session_timeout
To match the settiongs from istlsfastyet.com

Add a mention of ssl_buffer_size even though it can 't be enabled yet
2014-07-28 14:56:27 +00:00
AD7six aac9d71d54 add ssl example site
ensure to avoid any use of if as that's "extremely inefficient" and
eliminate redirects where possible
2014-07-28 14:52:00 +00:00
AD7six b5004a9b46 don't include ssl config by default
If the server has no ssl config - there's no need to load a config file
full of ssl config
2014-07-28 14:44:28 +00:00
AD7six 72f9509a5e disable ssl_session_tickets
it's only recently added so is a config error otherwise
2014-07-28 14:42:35 +00:00
AD7six 7295a765ee add stubs for ssl-stapling and spdy 2014-07-28 14:38:22 +00:00
AD7six 759bf84163 Default to use HTTP strict transport security 2014-07-28 14:30:00 +00:00
AD7six 398036440b add increased ssl timeout 2014-07-28 14:29:04 +00:00
AD7six d996d2da0c turn off ssl session tickets
Stolen from istlsfastyet.com's config

It is probably a more logical default to turn off session tickets
given the diff linked in the comment block.
2014-07-28 14:20:58 +00:00
AD7six 08d4bbbd04 remove SSLv3 from the ssl protocol list
As suggested in #44, and since h5bp doesn't support IE6 it seems to be
appropriate to remove a protocol which is in the list only to permit use
with IE6.
2014-07-28 14:16:09 +00:00
AD7six 029ff47286 move ssl config to a seperate file 2014-07-28 14:08:19 +00:00
AD7six 5142e91ecf Remove tcp_nodelay
The Nagle buffering algorithm is apparently that the best thing
to enable by default.

closes #28
2014-07-28 13:52:39 +00:00
Syed I.R 7cae83a0cf Fix typo, Update/Add Nginx Command to test a particular config file, Update Restart Command & Comments. 2014-07-28 13:43:34 +00:00
Syed I.R fc53165d01 Format README, Add Verify Config & Restart Nginx Command. 2014-07-28 13:43:34 +00:00
Marvin Roger 03dc5e07e6 Fix typo
Close h5bp/server-configs-nginx#48.
2014-06-26 22:42:12 +03:00
Syed I.R 2f57c32060 Make minor format related improvement in README.md 2014-06-22 22:08:03 +03:00
AD7six bf0e3657f9 apply cross-domain changes proposed in #23
closes #23
2014-04-08 10:13:29 +00:00
Andy Dawson 46e4d5b30b Merge pull request #36 from mediochrea/master
Added missing semicolon, removed text/html charset
2014-01-31 10:40:40 -08:00
Odontopera Mediochrea fa41e580df Added missing semicolon, removed text/html charset
I believe the error was because text/html is implied by default.
2014-01-30 23:23:31 +02:00
Andy Dawson 1a08f51108 Merge pull request #34 from h5bp/charset_types
Fix charset_types as mime.types is updated
2014-01-28 13:28:10 -08:00
Andy Dawson 5451d17260 Correct link to documentation. 2014-01-28 22:25:39 +01:00
Andy Dawson d34033193f Merge pull request #31 from alimony/patch-1
Fix broken documentation link.
2014-01-28 13:25:07 -08:00
Andy Dawson b1549a8438 Merge pull request #35 from ChrisMcKee/patch-1
ssl_ciphers update
2014-01-28 13:17:10 -08:00
Chris McKee 91cac519ef ssl_ciphers update
Updated ciphers to provide forwarding secrecy, a wider range of support and to match those provided by Mozilla security https://wiki.mozilla.org/Security/Server_Side_TLS#Nginx
2014-01-27 13:54:16 +00:00
Andy Dawson e1ff007951 Merge pull request #32 from Slix/patch-1
Fix spelling errors in nginx config docs.
2014-01-21 08:47:56 -08:00
Tsz Ming WONG e44a8ad34b Fix charset_types as mime.types is updated 2014-01-16 11:10:49 +02:00
Peter Kowalczyk d2bc65f6eb Fix spelling errors in nginx config docs. 2014-01-10 22:21:07 -06:00
Markus Amalthea Magnuson 353a5df984 Update README.md 2013-12-23 11:15:32 +01:00
Andy Dawson 8a870c2e5b Merge pull request #30 from appleboy/develop
Remove Chrome Frame meta tag
2013-12-23 02:01:17 -08:00
Markus Amalthea Magnuson bc21d74cd2 Fix broken documentation link.
The documentation link in the README is broken. It can be fixed either by changing "blob" to "tree", or by linking to the table of contents. This fix opts for the latter.
2013-12-22 10:43:21 +01:00
Bo-Yi Wu b4d4ebb357 Remove Chrome Frame meta tag. Reference h5bp/server-configs-nginx#2 2013-12-21 17:41:25 +08:00
Andy Dawson 209bea1152 Merge pull request #27 from irazasyed/patch-1
Renamed h5bp.conf to basic.conf README
2013-12-03 12:47:21 -08:00
Syed I.R 41e8ef9992 Renamed h5bp.conf to basic.conf README
Updated with correct filename.
2013-12-03 23:50:27 +05:30
Andy Dawson 742e9a262a Merge pull request #26 from dlion/patch-1
Update doc
2013-12-01 06:49:55 -08:00
Domenico Leone Luciani 4f7f285f45 Update doc
Because nginx doesn't start without fix access_log path.
2013-11-30 16:10:39 +01:00
Andy Dawson f8578ec325 Merge pull request #24 from h5bp/move-config
Move config files
2013-11-25 03:39:43 -08:00
AD7six d2fe435cc8 create getting started doc 2013-11-22 11:20:50 +00:00
AD7six 560bdab9cf Move config snippets around
Make it more obvious which snippets are location based, and which
are just directives. Need to provide more files like basic.conf to
cover more of the common use cases.
2013-11-22 10:50:58 +00:00
AD7six 77b4f6fb84 adds no value, remove 2013-11-22 10:35:33 +00:00
AD7six 3c31cc04e9 wrong dash 2013-11-22 10:33:50 +00:00
AD7six d3f07c8e32 get started on the documentation 2013-11-22 10:32:55 +00:00
AD7six 3feca85b44 remove readme from doc folder
a readme prevents navigating existing files via github
2013-11-21 23:09:47 +00:00
AD7six 3921535db8 add a doc block to no-default
and remove the default_server direcdtive from example.com. Since this file
is likely to be the copy-and-paste file for multiple server configs,
don't mark example.com as the default.
2013-11-20 20:40:02 +00:00
AD7six d5f68ed3ad Add a config file for no default site
fixes #10
2013-11-20 18:06:02 +00:00
AD7six e476b08d11 rename conf folder to h5bp
The name "conf" is potentially confusing as something which should be inclued
en masse rather than a folder of config snippets.

Closes #13
2013-11-20 18:06:02 +00:00
AD7six 1348cb9bfb Ensure compatibility with earlier/current versions of nginx
auto was not introdued until 1.3.8 and 1.2.5.

Debian wheezy for example only comes with 1.2.1, only the next version
(in testing) will have a version of nginx which supports auto.
2013-11-20 18:06:02 +00:00
AD7six 73d1895ff9 remove the sites-enabled readme
this file is considered a site config  file, preventing the use of the repo as is
2013-11-20 18:06:02 +00:00
Andy Dawson 6941aa5407 Merge pull request #17 from jammaloo/master
Typo foorbar -> foobar
2013-11-20 00:28:25 -08:00