780aceba92
Merge pull request #172 from quantumpacket/patch-2
...
Update ssl_ciphers To Latest Mozilla Intermediate
2017-05-06 16:59:17 +02:00
1648e2f0d4
Update ssl_ciphers To Latest Mozilla Intermediate
...
Updates to latest ciphers list for Mozilla Intermediate, which also adds support for ChaCha20 and Poly1305.
2017-01-08 12:18:04 -05:00
cb3dc0554e
Merge pull request #148 from leonklingele/add-header-always
...
Always add security-relevant headers to the response, regardless of the response code (implements #147 )
2016-09-09 16:39:54 +02:00
934eaf3f87
Always add security-relevant headers to the response, regardless of the response code (implements #147 )
...
From nginx' add_header documentation:
```
add_header Adds the specified field to a response header provided that
the response code equals 200, 201, 204, 206, 301, 302, 303, 304, or 307.
```
At least for all security-relevant headers this should not be the case
and the header should always be added.
2016-07-07 13:29:58 +02:00
3f4719b79a
Merge pull request #145 from Cloudoki/gitignore-sites-enabled
...
ignore files in sites-enabled
2016-06-30 16:14:35 +02:00
fcc2657585
gitignore already tracked
2016-06-30 14:29:39 +01:00
678951333a
Merge pull request #146 from Cloudoki/typo
...
fix missing ;
2016-06-30 15:23:58 +02:00
58e6af626e
ignore files in sites-enabled
2016-06-30 13:37:50 +01:00
60b272a2d3
fix missing ;
2016-06-30 13:32:40 +01:00
993b807c8e
Merge pull request #144 from appleboy/patch-2
...
Fixed #143 issue: Fix typo
2016-06-27 12:25:46 +02:00
ebdb5f091e
Fixed #143 issue: Fix typo
2016-06-19 16:32:17 +08:00
0bb5924b2a
Whitespace
2016-06-08 10:06:48 +02:00
f44d0305a0
Add a failing example
2016-06-08 10:06:16 +02:00
6b17b6025c
Show a successful example
2016-06-08 10:04:15 +02:00
bcdb8cd2bf
Now irrelevant
2016-06-08 10:01:27 +02:00
b8fdd45542
Remove access log for probably-not-static files
...
closes #131
2016-06-08 09:55:58 +02:00
d84f80ac98
Remove cache-control public
...
Closes #134
2016-06-08 09:55:00 +02:00
025b203b19
preload added to ssl.conf
2016-06-08 09:44:09 +02:00
7a0e282dd0
Add an ssl no-default example
...
I.e. an example of this:
-> curl -kI -H "Host: valid.com" https://localhost
HTTP/1.1 200 OK
...
-> curl -kI -H "Host: invalid.com" https://localhost
curl: (52) Empty reply from server
Whether this works or not depends on SNI.
2016-06-08 09:36:39 +02:00
6be3c46535
Merge pull request #138 from Buzut/master
...
Updated ssl.exemple.com to use http2 instead of spdy
2016-06-08 09:29:16 +02:00
ef96c5599f
Merge pull request #140 from ebgranger/feature/fixing-getting-started-documentation
...
documentation inconsistent with file structure
2016-06-08 09:26:45 +02:00
4300d7d402
Merge pull request #139 from cdchapman/hsts-includeSubDomains
...
Fix capitalization of includeSubDomains
2016-06-08 09:25:33 +02:00
ea87f60b29
documentation inconsistent with file structure
2016-06-07 16:07:49 -04:00
09f500815c
Fix capitalization of includeSubDomains
2016-06-04 12:22:43 -06:00
df102c6252
Updated ssl.exemple.com to use http2 instead of spdy
...
http2 is available in nginx since nginx 1.9.5. Therefor it's better to use the standard.
2016-05-25 15:02:34 +02:00
49aac21945
Merge pull request #133 from alanorth/keepalive-timeout-syntax
...
Correct syntax for keepalive_timeout
2016-03-24 18:00:01 +01:00
daea8eb54b
Merge pull request #129 from davisonio/specify-conf-defaults
...
Improve comments in nginx.conf
2016-03-24 17:59:35 +01:00
73db8ccfd2
Fix typo
2016-03-22 15:27:19 +00:00
605ec6f8c3
Improve comments in nginx.conf
2016-03-22 15:27:18 +00:00
ec4e0303f4
Correct syntax for keepalive_timeout
...
It doesn't seem to be a fatal error, but the keepalive_timeout
value actually requires "s" (for seconds). Another occurence of
this was fixed in 35434b3361http://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_timeout
Signed-off-by: Alan Orth <alan.orth@gmail.com>
2016-03-14 10:25:01 +02:00
66d0c463e0
Merge pull request #128 from corbanmailloux/patch-1
...
Single capitalization fix
2016-01-29 21:17:14 +01:00
029821b1a8
Merge pull request #130 from davisonio/specify-keepalive_timeout
...
Specify that keepalive_timeout is in seconds
2016-01-29 21:11:41 +01:00
740ba774f5
Merge pull request #124 from appleboy/patch-3
...
fix format.
2016-01-29 21:10:25 +01:00
7c3a67131c
Change default value in comment
2016-01-23 14:05:55 +00:00
35434b3361
Specify that keepalive_timeout is in seconds
2016-01-23 13:59:22 +00:00
1329a12ff3
Single capitalization fix
2016-01-22 15:05:01 -05:00
3270937c3a
fix format.
...
Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>
2015-12-04 22:25:31 +08:00
6e4b16c4cf
Merge pull request #122 from beilharz/patch-1
...
Update nginx.conf: Typo in a comment
2015-12-03 11:51:05 +01:00
181de133f3
Merge pull request #123 from appleboy/patch-1
...
Add white space for comment.
2015-12-03 11:50:35 +01:00
d5b5bf9e18
Add white space for comment.
2015-12-01 10:38:42 +08:00
5934741e15
Update nginx.conf
...
Typo: sites-available should be sites-enabled
2015-11-25 09:49:15 +01:00
82181a672a
Merge pull request #119 from Francisc/patch-1
...
Minor typo fix
2015-11-16 09:23:02 +01:00
d554c7c582
Miiiiiiiiiiiiiinor typo fix
2015-11-02 14:03:25 +02:00
94b3680c9d
Merge pull request #105 from Cryszon/patch-1
...
Updated locations to match h5bp's Apache config
2015-09-11 10:55:01 +02:00
e2ab3b5800
Merge pull request #112 from philippbecker/mime-types
...
Update media types
2015-09-11 10:49:24 +02:00
0932b4d10c
Merge pull request #111 from pentago/master
...
Added FreeBSD w/ ZFS performance instructions
2015-09-11 10:46:34 +02:00
faabaad16b
Update to mozilla's wiki's current intermediate set
2015-09-11 08:41:05 +00:00
1e2850833f
Merge pull request #114 from st-isidore-de-seville/master
...
fix #113
2015-09-11 10:32:53 +02:00
19d0f8ffbf
fix #113
2015-08-29 21:05:56 -04:00
f719f3e8e4
Update media types in `nginx.conf`
2015-07-21 11:34:05 +02:00
Andy Dawson