Commit Graph

513 Commits

Author SHA1 Message Date
Léo Colombaro 8832ef1aed
Bump server-config-test to 1.2.1 2019-07-31 14:59:35 +02:00
Pete Cooper a1a746a347 Switch tertiary DNS used for OCSP checking to OpenDNS (#235)
Oracle is shutting down Dyn DNS in 2020.
2019-06-26 00:12:26 +02:00
Léo Colombaro bc39e4c07d
Revert "Drop Cache-Control: no-transform usage"
This partially reverts commit 282d979a

Ref https://github.com/h5bp/server-configs-apache/issues/185
2019-06-06 00:46:47 +02:00
Léo Colombaro 611ed7507b
Release v3.1.0 2019-05-19 23:02:45 +02:00
Léo Colombaro 912d80523e
Fix CHANGELOG formatting 2019-05-19 23:01:49 +02:00
Léo Colombaro ece9c6b451
Use generic `$host` instead of host name 2019-05-16 22:58:45 +02:00
Léo Colombaro 8db768bd61
Pre-compressed content usage config files
Closes #231
2019-05-16 22:57:57 +02:00
Léo Colombaro d7fc6c362d
Fix rebase artifacts 2019-05-16 00:16:59 +02:00
Pete Cooper 67c54c53f1
Documentation formatting and reviewing (#232)
No code changes, some config reordering
2019-05-15 23:20:10 +02:00
Léo Colombaro c73d1efb60
Fix 304 responses Cache-control override
Fix #230
2019-05-15 21:07:50 +02:00
Léo Colombaro 7418b5023b
Fix dropped Cache-Control: no-transform usage for SVGZ Compression 2019-05-15 19:02:13 +02:00
Léo Colombaro 062d9a1445
Bump server-configs-test to v1.1.0 2019-05-15 18:56:14 +02:00
Léo Colombaro 0a6c880be0
Improve wording and file headers 2019-05-15 18:26:04 +02:00
Léo Colombaro 282d979af4
Drop Cache-Control: no-transform usage
Obsoleted with secure servers

See https://github.com/h5bp/server-configs-apache/issues/185
2019-05-15 18:24:30 +02:00
Pete Cooper 28874c33f0 Add Google Public DNS IPv6 and Cloudflare DNS IP addresses to `resolver` (#229)
Co-authored-by: Léo Colombaro <git@colombaro.fr>
2019-05-15 02:07:47 +02:00
Pete Cooper e30032165c Fix misc typos in comments (#228) 2019-05-14 19:02:21 +02:00
Pete Cooper e64b4a6ee2 Update README.md
Caps case and double space.
2019-05-14 17:03:37 +02:00
Jonathan Chun 19ef6a8849 Fix typo in example conf (#226) 2019-04-14 19:31:05 +02:00
Léo Colombaro 276af8da7b
Improve default Content-Security-Policy value (#224)
See https://github.com/h5bp/server-configs-apache/pull/181
2019-03-26 12:41:15 +01:00
Léo Colombaro d186781282
Update `ngx_pagespeed` docs link 2019-03-24 22:21:07 +01:00
Léo Colombaro 932e5ea5b7
Merge remote-tracking branch 'origin/master' 2019-03-24 01:50:13 +01:00
Léo Colombaro 12b0ff87b9
Bump server-configs-test to v1.0.6 2019-03-24 01:50:04 +01:00
Léo Colombaro 00373398ef
Keep testing CSP headers 2019-03-15 19:01:48 +01:00
Léo Colombaro 29ff09ac95
Remove CSP from basic.conf includes
Too strong for general purposes.

Closes #222
2019-03-15 18:58:47 +01:00
Léo Colombaro 9c6cca96c8
Release v3.0.1 2019-03-09 15:20:30 +01:00
Léo Colombaro cec616a103
SVGZ files are already compressed
Disable gzip function for them
Regression d2f4e5c68f
2019-03-09 15:08:44 +01:00
Léo Colombaro 3b0c4c41df
Fix regexp expressions in mime-types maps 2019-03-09 13:45:33 +01:00
Léo Colombaro 7e270ae657
Bump server-configs-test to v1.0.3 2019-03-09 13:17:33 +01:00
Léo Colombaro db1601f606
Use regexp in MIME-types based maps 2019-03-09 02:44:10 +01:00
Léo Colombaro 06e5fc8445
Remove extra match-any regexp 2019-03-09 02:41:29 +01:00
Mark Woon d65cd97761 Use regexp in MIME-types based maps (#221)
Fix #220

Co-authored-by: Léo Colombaro <git@colombaro.fr>
2019-03-09 02:34:15 +01:00
Léo Colombaro 50a6d793ce
Remove duplicated .conf in include 2019-02-13 14:45:52 +01:00
Léo Colombaro f600128203
Add Referrer-Policy for html document by default 2019-02-13 14:31:53 +01:00
Léo Colombaro c04dcb232f
Bump server-configs-test 2019-02-13 14:26:52 +01:00
Léo Colombaro 48277fbc14
Bump server-configs-test 2019-02-13 14:16:45 +01:00
Léo Colombaro 3cf23ea499
Bump server-configs-test 2019-02-13 14:10:36 +01:00
Léo Colombaro 94a9cec172 Release v3.0.0 2019-02-12 17:03:13 +01:00
Léo Colombaro efafc1f52a
Use minimal env for Travis-CI builds 2019-02-12 12:53:16 +01:00
Léo Colombaro 0acfbbd8fa
Bump server-configs-test 2019-02-12 12:31:41 +01:00
Léo Colombaro 51f5ffab82
Clean up and prepare docs for v3 2019-02-12 12:25:30 +01:00
Léo Colombaro 92a1c5df93
Let default servers be HTTP/2 compatible 2019-02-11 19:12:17 +01:00
Léo Colombaro 3883f59739
Remove "duplicated" deferred
These suggestions are more complicated to use than just commenting them
out.
Users may face an errored situation.

Ref: a36387848f

Fix #199
2019-02-11 19:11:21 +01:00
Romario Maxwell a7b8831a12 fix typo in example.com.conf header comment 2019-02-11 18:03:04 +01:00
Léo Colombaro 52e13535b4 Add test vhosts and Travis CI config 2019-02-11 16:18:43 +01:00
Léo Colombaro 283b292c5e
Add default recommended headers
Since no more location directive is used, making these header
available everywhere is possible without breaking servers.
2019-02-10 22:20:05 +01:00
Léo Colombaro a4c9e2da8e
Better default certificates folder
Mapped as Docker Nginx image
2019-02-10 22:13:25 +01:00
Léo Colombaro 6dd4cc27ed Switch from location directives to maps based on MIME-types
* Expire
* X-XSS-Protection
* X-Frame-Options
* X-UA-Compatible
* Content-Security-Policy
* Access-Control-Allow-Origin
2019-02-10 21:56:10 +01:00
Léo Colombaro 2d135053cb
Move MIME-type and charset declaration into their own conf files 2019-02-10 20:40:50 +01:00
Léo Colombaro 452b630330
Update gzipped MIME-type following web standard
Source https://github.com/jshttp/mime-db
2019-02-10 20:38:23 +01:00
Léo Colombaro e21aec5822
Block access to file #.*#
Used to contain sensitive data
2019-02-10 20:36:26 +01:00