Commit Graph

398 Commits

Author SHA1 Message Date
Eric Andrew Lewis 01af1c1e43 Add an inline documentation link to the sites-enabled documentation page. 2015-06-12 09:52:16 -04:00
Eric Lewis 01cefcda17 Explain why everything in the sites-enabled folder is included 2015-06-11 10:27:20 -04:00
Kimmo Salmela d37a4c7165 Updated locations to match h5bp's Apache config
See https://github.com/h5bp/server-configs-apache/issues/31 for `well-known` change.
2015-06-08 15:56:19 +03:00
Andy Dawson 8e361ed61a Merge pull request #104 from jeffwidman/patch-3
Fix mispelling
2015-06-05 10:55:12 +02:00
Andy Dawson ab2174c069 Merge pull request #103 from jeffwidman/patch-2
Fix mispelling
2015-06-05 10:54:55 +02:00
Andy Dawson 687994152c Merge pull request #102 from jeffwidman/patch-1
Fix typo
2015-06-05 10:54:28 +02:00
Jeff Widman 9be5b05c59 Fix mispelling 2015-06-03 23:49:42 -07:00
Jeff Widman 941cfc4803 Fix mispelling 2015-06-03 23:47:42 -07:00
Jeff Widman 4a5d6523a8 Fix typo 2015-06-03 23:40:36 -07:00
Andy Dawson fce0e368c1 Don't use invalid examples
A wildcard subdomain isn't valid syntax for a ACAO header
2015-05-29 15:32:23 +02:00
Andy Dawson b674df5545 Merge pull request #93 from pentago/master
Added accept filter/socket options for SSL servers on FreeBSD and Linux hosts
2015-05-16 11:35:58 +02:00
Luke Brookhart 72ad300c95 Fix typo in `inline.sh`
`h5bp/basics.conf` => `h5bp/basic.conf`

Close #97
2015-05-11 17:59:39 +02:00
Cătălin Mariș 0b3643c557 Update `CHANGELOG.md` 2015-04-08 00:41:42 +03:00
Cătălin Mariș 6c098fe359 Map `.manifest` → `text/cache-manifest` media type
The specification for the manifest file for web applications was
recently updated¹ and it changed one of the recommended file extensions
from `.manifest` to the unique `.webmanifest`².

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

¹ 0eecadd090
² https://github.com/w3c/manifest/issues/346
2015-04-08 00:39:12 +03:00
Pentago a36387848f Added 'dataready' accept_filter for SSL servers on FreeBSD hosts as per 'accept_filter=filter' section of http://nginx.org/en/docs/http/ngx_http_core_module.html#listen
More on FreeBSD's accept filters:
http://www.freebsd.org/cgi/man.cgi?accf_http
http://www.freebsd.org/cgi/man.cgi?accf_data

Also added 'defered' (TCP_DEFER_ACCEPT) socket option to SSL server on Linux hosts and organized/commented both platform directives above the default value.

Related to https://github.com/h5bp/server-configs-nginx/blob/master/sites-available/example.com#L19
2015-04-01 23:10:30 +02:00
Cătălin Mariș 72fb2da17d Remove vcf → text/x-vcard mapping from mime.types
Ref: http://www.iana.org/assignments/media-types/text/vcard
Fix h5bp/server-configs-nginx#92
2015-04-01 10:23:13 +03:00
Cătălin Mariș 34c6b3ebe6 README.md: Make minor improvements 2015-03-25 12:05:07 +02:00
Cătălin Mariș d1c9a1b942 Update `CHANGELOG.md` 2015-03-25 11:11:38 +02:00
Cătălin Mariș 6c1793bb68 Update the list of resources to be compressed
Ref: a0c4e17190/src/web_performance/compression.conf
2015-03-25 11:10:39 +02:00
Cătălin Mariș 0ac995867d Update `mime.types`
* Reorganized media types and order them alphabetically
* Include some new media types in order to align with what is provided
  by the Apache configurations.
  c805353c41/src/media_types/media_types.conf
2015-03-25 10:59:56 +02:00
Cătălin Mariș 4737654b8f Update `CHANGELOG.md` 2015-03-25 10:12:41 +02:00
Cătălin Mariș d7e0e1bf46 Remove the .manifest → text/cache-manifest mapping
Four years ago the recommended file extension for AppCache manifest
files was changed¹ from `.manifest` to `.appcache`. So, even adding
into consideration the transitional period, it no longer makes sense
to keep the configurations that ensure that `.manifest` files are
served with the AppCache required `text/cache-manifest` media type.

Also, recently, `.manifest` became one of the recommended file
extensions for web application manifest² files.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

¹ https://html5.org/r/5812
² http://w3c.github.io/manifest/
2015-03-25 10:06:06 +02:00
Cătălin Mariș dc3658bee6 Rename `LICENSE.md` to `LICENSE.txt`
Change made so that the process of opening the `LICENSE` file is
easier for non-technical people.
2015-03-25 10:05:20 +02:00
Sylvain Emery 722e11e432 Change media types for `.atom` and `.rss` files
Modify the configurations so that:

 * `.atom` files are served with the `application/atom+xml`¹ media type
 * `.rss` files are served with the `application/rss+xml`² media type

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

¹ https://www.iana.org/assignments/media-types/application/atom+xml
² http://tools.ietf.org/id/draft-nottingham-rss-media-type-00.txt

Ref: https://github.com/h5bp/server-configs-apache/pull/50#issuecomment-76552855
     653c461c35

Close h5bp/server-configs-nginx#90
2015-03-19 22:00:34 +02:00
Andy Dawson 66be52363e Merge pull request #89 from LC43/patch-3
Don't restart nginx - reload it.
2015-02-23 19:36:59 +01:00
Pedro de Carvalho 4d354d425b dropping the eggs.
removed the blah blah and link to documentation.
2015-02-23 18:18:51 +00:00
Pedro de Carvalho 59ddad53c8 calling reload nginx by the system scripts 2015-02-23 09:52:34 +00:00
Andy Dawson 6db671eb66 Merge pull request #88 from LC43/patch-1
spacing words
2015-02-23 09:50:58 +01:00
Andy Dawson 74b0a0f38f Merge pull request #87 from Steffen185/patch-3
Add MIME-Type for .xsl files
2015-02-23 09:50:17 +01:00
Andy Dawson 63db28bcfa Merge pull request #84 from Rowno/patch-1
Add the Mozilla SSL config generator to related projects
2015-02-23 09:48:34 +01:00
Pedro de Carvalho b43fbb1f69 Update getting-started.md 2015-02-22 21:40:01 +00:00
Pedro de Carvalho cd9384f096 added the -s flag to the reload command
The nginx documentation advises on using the -s signal to reload configuration.
2015-02-22 20:28:57 +00:00
Pedro de Carvalho 64abdfba64 spacing words 2015-02-22 20:15:20 +00:00
Steffen Weber 526ab0ff07 Add MIME-Types for .xsl files
The correct MIME-Type for XSL files is "application/xslt+xml" according to http://www.w3.org/TR/2007/REC-xslt20-20070123/#media-type-registration.
2015-01-14 11:17:25 +01:00
Roland Warmerdam 94d35d89ef Add the Mozilla SSL config generator to related projects 2014-12-16 21:48:16 +13:00
Drew Hammond ab567b7f83 Fix minor typos and the capitalization of acronyms
Close h5bp/server-configs-nginx#83
2014-11-25 01:48:48 +02:00
Joey Geiger 1089839e54 Fix typo in `expires.conf`
Close h5bp/server-configs-nginx#82.
2014-11-17 20:31:24 +02:00
Andy Dawson bb3dcda427 Merge pull request #81 from philippbecker/patch-1
Remove include directive in ssl.example.com
2014-11-10 09:54:52 +01:00
Philipp Becker fdee2c257c Remove include directive in ssl.example.com
To include the SSL related directives in the port 80 server block seems to be redundant.
Because we are redirecting explicit all incoming traffic via port 80 to the HTTPS host on
port 443 where only the *secure-connection-magic* is happen.

Maybe I am missing something, but I tested the configuration
under the following system and encountered no negative side effects:

**Server**
* Ubuntu 14.04 LTS
* Nginx 1.7.7 mainline

**Client**
* OS X 10.9.5
* Browser: FF 33, Chrome 38, Safari 7
2014-11-10 03:04:31 +01:00
Andy Dawson 228c5ccca0 Merge pull request #78 from ChrisMcKee/patch-4
Extra security headers without a home
2014-10-30 16:02:01 +01:00
Chris McKee cb0ca2934c Update extra-security.conf 2014-10-30 09:59:06 +00:00
Andy Dawson 67a259a471 Merge pull request #77 from ChrisMcKee/patch-3
Change note / add missing header
2014-10-29 20:03:19 +01:00
Andy Dawson 85018fa236 avoid long lines 2014-10-29 19:47:17 +01:00
Andy Dawson 62ef8ddbcc Merge pull request #75 from ChrisMcKee/patch-1
add secondary google dns ip and 2 failover DYN DNS public dns ips, and t...
2014-10-29 19:46:29 +01:00
Andy Dawson b7f043660a Merge pull request #76 from ChrisMcKee/patch-2
Update Cipher list to latest add version of STS
2014-10-29 09:36:36 +01:00
Chris McKee a3cf3aab00 Extra security headers without a home 2014-10-28 21:28:03 +00:00
Chris McKee a4b121a2e7 Change note / add missing header 2014-10-28 21:22:27 +00:00
Chris McKee a97cbecd12 Update Cipher list to latest add version of STS
Updated latest "intermediate" ciphers from mozilla
Add another version of the STS header including subdomains and comments
Add note at base to consider ssl-stapling
2014-10-28 21:20:37 +00:00
Chris McKee 6121b47151 add secondary google dns ip and 2 failover DYN DNS public dns ips, and timeouts 2014-10-28 21:09:57 +00:00
Steffen Weber 8ec8a82113 Move SVG media type into the "Images" group
SVG is primarily an image format. Its usage as a font format is a
legacy issue for supporting iOS 3 and iOS 4. In Chrome 38, support
for SVG fonts has been removed (http://caniuse.com/#feat=svg-fonts).
They have never been supported in Firefox or IE.

Close h5bp/server-configs-nginx#74
2014-10-27 17:46:39 +02:00