Commit Graph

300 Commits

Author SHA1 Message Date
Johannes Müller b59fbada2c Add empty server_name for no-default config 2016-11-23 23:53:01 +00:00
Andy Dawson cb3dc0554e Merge pull request #148 from leonklingele/add-header-always
Always add security-relevant headers to the response, regardless of the response code (implements #147)
2016-09-09 16:39:54 +02:00
Leon Klingele 934eaf3f87 Always add security-relevant headers to the response, regardless of the response code (implements #147)
From nginx' add_header documentation:
```
add_header Adds the specified field to a response header provided that
the response code equals 200, 201, 204, 206, 301, 302, 303, 304, or 307.
```
At least for all security-relevant headers this should not be the case
and the header should always be added.
2016-07-07 13:29:58 +02:00
Andy Dawson 3f4719b79a Merge pull request #145 from Cloudoki/gitignore-sites-enabled
ignore files in sites-enabled
2016-06-30 16:14:35 +02:00
Edgar Ribeiro fcc2657585 gitignore already tracked 2016-06-30 14:29:39 +01:00
Andy Dawson 678951333a Merge pull request #146 from Cloudoki/typo
fix missing ;
2016-06-30 15:23:58 +02:00
Edgar Ribeiro 58e6af626e ignore files in sites-enabled 2016-06-30 13:37:50 +01:00
Edgar Ribeiro 60b272a2d3 fix missing ; 2016-06-30 13:32:40 +01:00
Andy Dawson 993b807c8e Merge pull request #144 from appleboy/patch-2
Fixed #143 issue: Fix typo
2016-06-27 12:25:46 +02:00
Bo-Yi Wu ebdb5f091e Fixed #143 issue: Fix typo 2016-06-19 16:32:17 +08:00
Andy Dawson 0bb5924b2a Whitespace 2016-06-08 10:06:48 +02:00
Andy Dawson f44d0305a0 Add a failing example 2016-06-08 10:06:16 +02:00
Andy Dawson 6b17b6025c Show a successful example 2016-06-08 10:04:15 +02:00
Andy Dawson bcdb8cd2bf Now irrelevant 2016-06-08 10:01:27 +02:00
Andy Dawson b8fdd45542 Remove access log for probably-not-static files
closes #131
2016-06-08 09:55:58 +02:00
Andy Dawson d84f80ac98 Remove cache-control public
Closes #134
2016-06-08 09:55:00 +02:00
root 025b203b19 preload added to ssl.conf 2016-06-08 09:44:09 +02:00
Andy Dawson 7a0e282dd0 Add an ssl no-default example
I.e. an example of this:

    -> curl -kI -H "Host: valid.com" https://localhost
    HTTP/1.1 200 OK
    ...
    -> curl -kI -H "Host: invalid.com" https://localhost
    curl: (52) Empty reply from server

Whether this works or not depends on SNI.
2016-06-08 09:36:39 +02:00
Andy Dawson 6be3c46535 Merge pull request #138 from Buzut/master
Updated ssl.exemple.com to use http2 instead of spdy
2016-06-08 09:29:16 +02:00
Andy Dawson ef96c5599f Merge pull request #140 from ebgranger/feature/fixing-getting-started-documentation
documentation inconsistent with file structure
2016-06-08 09:26:45 +02:00
Andy Dawson 4300d7d402 Merge pull request #139 from cdchapman/hsts-includeSubDomains
Fix capitalization of includeSubDomains
2016-06-08 09:25:33 +02:00
Edward Granger ea87f60b29 documentation inconsistent with file structure 2016-06-07 16:07:49 -04:00
Chris Chapman 09f500815c Fix capitalization of includeSubDomains 2016-06-04 12:22:43 -06:00
Buzut df102c6252 Updated ssl.exemple.com to use http2 instead of spdy
http2 is available in nginx since nginx 1.9.5. Therefor it's better to use the standard.
2016-05-25 15:02:34 +02:00
Andy Dawson 49aac21945 Merge pull request #133 from alanorth/keepalive-timeout-syntax
Correct syntax for keepalive_timeout
2016-03-24 18:00:01 +01:00
Andy Dawson daea8eb54b Merge pull request #129 from davisonio/specify-conf-defaults
Improve comments in nginx.conf
2016-03-24 17:59:35 +01:00
Craig Davison 73db8ccfd2 Fix typo 2016-03-22 15:27:19 +00:00
Craig Davison 605ec6f8c3 Improve comments in nginx.conf 2016-03-22 15:27:18 +00:00
Alan Orth ec4e0303f4 Correct syntax for keepalive_timeout
It doesn't seem to be a fatal error, but the keepalive_timeout
value actually requires "s" (for seconds). Another occurence of
this was fixed in 35434b3361 but
these slipped through.

See: http://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_timeout

Signed-off-by: Alan Orth <alan.orth@gmail.com>
2016-03-14 10:25:01 +02:00
Andy Dawson 66d0c463e0 Merge pull request #128 from corbanmailloux/patch-1
Single capitalization fix
2016-01-29 21:17:14 +01:00
Andy Dawson 029821b1a8 Merge pull request #130 from davisonio/specify-keepalive_timeout
Specify that keepalive_timeout is in seconds
2016-01-29 21:11:41 +01:00
Andy Dawson 740ba774f5 Merge pull request #124 from appleboy/patch-3
fix format.
2016-01-29 21:10:25 +01:00
Craig Davison 7c3a67131c Change default value in comment 2016-01-23 14:05:55 +00:00
Craig Davison 35434b3361 Specify that keepalive_timeout is in seconds 2016-01-23 13:59:22 +00:00
Corban Mailloux 1329a12ff3 Single capitalization fix 2016-01-22 15:05:01 -05:00
Bo-Yi Wu 3270937c3a fix format.
Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>
2015-12-04 22:25:31 +08:00
Andy Dawson 6e4b16c4cf Merge pull request #122 from beilharz/patch-1
Update nginx.conf: Typo in a comment
2015-12-03 11:51:05 +01:00
Andy Dawson 181de133f3 Merge pull request #123 from appleboy/patch-1
Add white space for comment.
2015-12-03 11:50:35 +01:00
Bo-Yi Wu d5b5bf9e18 Add white space for comment. 2015-12-01 10:38:42 +08:00
beilharz 5934741e15 Update nginx.conf
Typo: sites-available should be sites-enabled
2015-11-25 09:49:15 +01:00
Andy Dawson 82181a672a Merge pull request #119 from Francisc/patch-1
Minor typo fix
2015-11-16 09:23:02 +01:00
Francisc Romano d554c7c582 Miiiiiiiiiiiiiinor typo fix 2015-11-02 14:03:25 +02:00
Andy Dawson 94b3680c9d Merge pull request #105 from Cryszon/patch-1
Updated locations to match h5bp's Apache config
2015-09-11 10:55:01 +02:00
Andy Dawson e2ab3b5800 Merge pull request #112 from philippbecker/mime-types
Update media types
2015-09-11 10:49:24 +02:00
Andy Dawson 0932b4d10c Merge pull request #111 from pentago/master
Added FreeBSD w/ ZFS performance instructions
2015-09-11 10:46:34 +02:00
AD7six faabaad16b Update to mozilla's wiki's current intermediate set 2015-09-11 08:41:05 +00:00
Andy Dawson 1e2850833f Merge pull request #114 from st-isidore-de-seville/master
fix #113
2015-09-11 10:32:53 +02:00
St. Isidore de Seville 19d0f8ffbf fix #113 2015-08-29 21:05:56 -04:00
Philipp Becker f719f3e8e4 Update media types in `nginx.conf` 2015-07-21 11:34:05 +02:00
Philipp Becker 20d025f7f6 Minor extension of the alphabetical sorting of media types 2015-07-21 10:42:40 +02:00