gaja-group
/
server-configs-nginx
mirror of https://github.com/h5bp/server-configs-nginx
2
0
Fork 0
Code Issues Releases Wiki Activity
240 Commits 2 Branches 12 Tags 1.2 MiB
Commit Graph

240 Commits

Author SHA1 Message Date
Jeff Widman 9be5b05c59 Fix mispelling 2015-06-03 23:49:42 -07:00
Andy Dawson fce0e368c1 Don't use invalid examples 
A wildcard subdomain isn't valid syntax for a ACAO header
 2015-05-29 15:32:23 +02:00
Andy Dawson b674df5545 Merge pull request #93 from pentago/master 
Added accept filter/socket options for SSL servers on FreeBSD and Linux hosts
 2015-05-16 11:35:58 +02:00
Luke Brookhart 72ad300c95 Fix typo in `inline.sh` 
`h5bp/basics.conf` => `h5bp/basic.conf`

Close #97
 2015-05-11 17:59:39 +02:00
Cătălin Mariș 0b3643c557 Update `CHANGELOG.md` 2015-04-08 00:41:42 +03:00
Cătălin Mariș 6c098fe359 Map `.manifest` → `text/cache-manifest` media type 
The specification for the manifest file for web applications was
recently updated¹ and it changed one of the recommended file extensions
from `.manifest` to the unique `.webmanifest`².

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

¹ 0eecadd090
² https://github.com/w3c/manifest/issues/346
 2015-04-08 00:39:12 +03:00
Pentago a36387848f Added 'dataready' accept_filter for SSL servers on FreeBSD hosts as per 'accept_filter=filter' section of http://nginx.org/en/docs/http/ngx_http_core_module.html#listen 
More on FreeBSD's accept filters:
http://www.freebsd.org/cgi/man.cgi?accf_http
http://www.freebsd.org/cgi/man.cgi?accf_data

Also added 'defered' (TCP_DEFER_ACCEPT) socket option to SSL server on Linux hosts and organized/commented both platform directives above the default value.

Related to https://github.com/h5bp/server-configs-nginx/blob/master/sites-available/example.com#L19
 2015-04-01 23:10:30 +02:00
Cătălin Mariș 72fb2da17d Remove vcf → text/x-vcard mapping from mime.types 
Ref: http://www.iana.org/assignments/media-types/text/vcard
Fix h5bp/server-configs-nginx#92
 2015-04-01 10:23:13 +03:00
Cătălin Mariș 34c6b3ebe6 README.md: Make minor improvements 2015-03-25 12:05:07 +02:00
Cătălin Mariș d1c9a1b942 Update `CHANGELOG.md` 2015-03-25 11:11:38 +02:00
Cătălin Mariș 6c1793bb68 Update the list of resources to be compressed 
Ref: a0c4e17190/src/web_performance/compression.conf
 2015-03-25 11:10:39 +02:00
Cătălin Mariș 0ac995867d Update `mime.types` 
* Reorganized media types and order them alphabetically
* Include some new media types in order to align with what is provided
  by the Apache configurations.
  c805353c41/src/media_types/media_types.conf
 2015-03-25 10:59:56 +02:00
Cătălin Mariș 4737654b8f Update `CHANGELOG.md` 2015-03-25 10:12:41 +02:00
Cătălin Mariș d7e0e1bf46 Remove the .manifest → text/cache-manifest mapping 
Four years ago the recommended file extension for AppCache manifest
files was changed¹ from `.manifest` to `.appcache`. So, even adding
into consideration the transitional period, it no longer makes sense
to keep the configurations that ensure that `.manifest` files are
served with the AppCache required `text/cache-manifest` media type.

Also, recently, `.manifest` became one of the recommended file
extensions for web application manifest² files.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

¹ https://html5.org/r/5812
² http://w3c.github.io/manifest/
 2015-03-25 10:06:06 +02:00
Cătălin Mariș dc3658bee6 Rename `LICENSE.md` to `LICENSE.txt` 
Change made so that the process of opening the `LICENSE` file is
easier for non-technical people.
 2015-03-25 10:05:20 +02:00
Sylvain Emery 722e11e432 Change media types for `.atom` and `.rss` files 
Modify the configurations so that:

 * `.atom` files are served with the `application/atom+xml`¹ media type
 * `.rss` files are served with the `application/rss+xml`² media type

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

¹ https://www.iana.org/assignments/media-types/application/atom+xml
² http://tools.ietf.org/id/draft-nottingham-rss-media-type-00.txt

Ref: https://github.com/h5bp/server-configs-apache/pull/50#issuecomment-76552855
     653c461c35

Close h5bp/server-configs-nginx#90
 2015-03-19 22:00:34 +02:00
Andy Dawson 66be52363e Merge pull request #89 from LC43/patch-3 
Don't restart nginx - reload it.
 2015-02-23 19:36:59 +01:00
Pedro de Carvalho 4d354d425b dropping the eggs. 
removed the blah blah and link to documentation.
 2015-02-23 18:18:51 +00:00
Pedro de Carvalho 59ddad53c8 calling reload nginx by the system scripts 2015-02-23 09:52:34 +00:00
Andy Dawson 6db671eb66 Merge pull request #88 from LC43/patch-1 
spacing words
 2015-02-23 09:50:58 +01:00
Andy Dawson 74b0a0f38f Merge pull request #87 from Steffen185/patch-3 
Add MIME-Type for .xsl files
 2015-02-23 09:50:17 +01:00
Andy Dawson 63db28bcfa Merge pull request #84 from Rowno/patch-1 
Add the Mozilla SSL config generator to related projects
 2015-02-23 09:48:34 +01:00
Pedro de Carvalho b43fbb1f69 Update getting-started.md 2015-02-22 21:40:01 +00:00
Pedro de Carvalho cd9384f096 added the -s flag to the reload command 
The nginx documentation advises on using the -s signal to reload configuration.
 2015-02-22 20:28:57 +00:00
Pedro de Carvalho 64abdfba64 spacing words 2015-02-22 20:15:20 +00:00
Steffen Weber 526ab0ff07 Add MIME-Types for .xsl files 
The correct MIME-Type for XSL files is "application/xslt+xml" according to http://www.w3.org/TR/2007/REC-xslt20-20070123/#media-type-registration.
 2015-01-14 11:17:25 +01:00
Roland Warmerdam 94d35d89ef Add the Mozilla SSL config generator to related projects 2014-12-16 21:48:16 +13:00
Drew Hammond ab567b7f83 Fix minor typos and the capitalization of acronyms 
Close h5bp/server-configs-nginx#83
 2014-11-25 01:48:48 +02:00
Joey Geiger 1089839e54 Fix typo in `expires.conf` 
Close h5bp/server-configs-nginx#82.
 2014-11-17 20:31:24 +02:00
Andy Dawson bb3dcda427 Merge pull request #81 from philippbecker/patch-1 
Remove include directive in ssl.example.com
 2014-11-10 09:54:52 +01:00
Philipp Becker fdee2c257c Remove include directive in ssl.example.com 
To include the SSL related directives in the port 80 server block seems to be redundant.
Because we are redirecting explicit all incoming traffic via port 80 to the HTTPS host on
port 443 where only the *secure-connection-magic* is happen.

Maybe I am missing something, but I tested the configuration
under the following system and encountered no negative side effects:

**Server**
* Ubuntu 14.04 LTS
* Nginx 1.7.7 mainline

**Client**
* OS X 10.9.5
* Browser: FF 33, Chrome 38, Safari 7
 2014-11-10 03:04:31 +01:00
Andy Dawson 228c5ccca0 Merge pull request #78 from ChrisMcKee/patch-4 
Extra security headers without a home
 2014-10-30 16:02:01 +01:00
Chris McKee cb0ca2934c Update extra-security.conf 2014-10-30 09:59:06 +00:00
Andy Dawson 67a259a471 Merge pull request #77 from ChrisMcKee/patch-3 
Change note / add missing header
 2014-10-29 20:03:19 +01:00
Andy Dawson 85018fa236 avoid long lines 2014-10-29 19:47:17 +01:00
Andy Dawson 62ef8ddbcc Merge pull request #75 from ChrisMcKee/patch-1 
add secondary google dns ip and 2 failover DYN DNS public dns ips, and t...
 2014-10-29 19:46:29 +01:00
Andy Dawson b7f043660a Merge pull request #76 from ChrisMcKee/patch-2 
Update Cipher list to latest add version of STS
 2014-10-29 09:36:36 +01:00
Chris McKee a3cf3aab00 Extra security headers without a home 2014-10-28 21:28:03 +00:00
Chris McKee a4b121a2e7 Change note / add missing header 2014-10-28 21:22:27 +00:00
Chris McKee a97cbecd12 Update Cipher list to latest add version of STS 
Updated latest "intermediate" ciphers from mozilla
Add another version of the STS header including subdomains and comments
Add note at base to consider ssl-stapling
 2014-10-28 21:20:37 +00:00
Chris McKee 6121b47151 add secondary google dns ip and 2 failover DYN DNS public dns ips, and timeouts 2014-10-28 21:09:57 +00:00
Steffen Weber 8ec8a82113 Move SVG media type into the "Images" group 
SVG is primarily an image format. Its usage as a font format is a
legacy issue for supporting iOS 3 and iOS 4. In Chrome 38, support
for SVG fonts has been removed (http://caniuse.com/#feat=svg-fonts).
They have never been supported in Firefox or IE.

Close h5bp/server-configs-nginx#74
 2014-10-27 17:46:39 +02:00
Andy Dawson b82491d00e Merge pull request #73 from Steffen185/patch-1 
MIME-Types: support for .opus files
 2014-10-27 15:48:37 +01:00
Steffen Weber e9dc7f6c78 MIME-Types: support for .opus files 
http://en.wikipedia.org/wiki/Opus_(audio_format)
 2014-10-27 15:31:54 +01:00
AD7six c8bcd99789 bump the minimum version requirement to 1.6.0 
using the version shipped with debian stable (which is where 1.2.1 came
from) holds back this repository too much.
 2014-10-24 16:13:56 +00:00
Andy Dawson 82ee454c90 Correct bad link 2014-10-24 12:21:13 +02:00
AD7six 46312a862a v1.0.0 2014-10-24 09:41:42 +00:00
AD7six 8d3af29b74 add a header doc block 2014-10-24 09:30:14 +00:00
AD7six 269fa6e43e add some structure to this bash script 
Add help usage and examples. Some structural hints taken from
http://linuxcommand.org/html_text/new_script.README.html
 2014-10-24 09:19:48 +00:00
AD7six e883e7d8c5 Add very simple debugging script 
this script converts include statements to dump the included file's
contents inline.
 2014-10-24 09:00:36 +00:00