nisbet-hubbard
|
bcaccab029
|
add a location block dedicated to the websocket to improve performances
|
2024-05-25 11:09:10 +08:00 |
|
mathilde-cryptpad
|
c9600c12ab
|
add a location block dedicated to the websocket to improve performances
|
2024-05-22 14:39:23 +02:00 |
|
yflory
|
86776894cc
|
Merge branch 'main' into staging
|
2024-05-16 17:20:32 +02:00 |
|
yflory
|
0604b708dc
|
Only allow loading onlyoffice fonts + update nginx #1472
|
2024-04-17 15:12:27 +02:00 |
|
nisbet-hubbard
|
623b47f097
|
Suport .mjs files content-type
|
2024-04-16 22:24:53 +08:00 |
|
yflory
|
f5478c10da
|
Fix nginx advenced config issue
|
2024-01-31 12:13:44 +01:00 |
|
yflory
|
df19bf0264
|
Suport .mjs files content-type in nginx config
|
2024-01-31 11:56:00 +01:00 |
|
yflory
|
79caca130b
|
Merge pull request #1295 from cryptpad/drawio-image
Drawio image
|
2024-01-29 17:29:33 +01:00 |
|
yflory
|
d2252049c3
|
Update example nginx
|
2024-01-29 17:26:24 +01:00 |
|
David Benque
|
06f4b8e590
|
Add licensing information to new files
|
2023-12-19 11:38:26 +00:00 |
|
yflory
|
f9e6c8d142
|
tMerge branch 'main' into 5.6-rc
|
2023-12-18 14:07:13 +01:00 |
|
Mathilde Grünig
|
6c9a99a5e4
|
remove debugging.md, almost empty file
|
2023-12-08 09:57:08 +01:00 |
|
Wolfgang Ginolas
|
d42539b3b2
|
Merge remote-tracking branch 'origin/staging' into drawio-image
|
2023-12-06 09:08:32 +01:00 |
|
nisbet-hubbard
|
3ea05fddb7
|
Edit for consistency
|
2023-12-06 15:53:18 +08:00 |
|
nisbet-hubbard
|
0f7cc0f8a7
|
Create example.httpd.conf
|
2023-12-06 15:24:32 +08:00 |
|
Mathilde Grünig
|
078095c3e2
|
reimplement proper service logging after mistake in e80b6c2
|
2023-11-24 11:52:57 +01:00 |
|
Wolfgang Ginolas
|
7f55498bcc
|
Update draw.io dependency and remove unneeded CSP headers
|
2023-11-01 09:19:46 +01:00 |
|
Wolfgang Ginolas
|
304fc6e970
|
Upgrade draw.io to 21.7.5
|
2023-11-01 09:19:45 +01:00 |
|
David Benque
|
8f0a6319a5
|
Apply headers
|
2023-10-20 15:35:26 +01:00 |
|
yflory
|
6c6220edfc
|
Fix comments in nginx file
|
2023-10-03 12:04:55 +02:00 |
|
yflory
|
1c2764dbb8
|
Revert revert "have 2 distinctives Nginx examples, default & advanced"
This reverts commit 9fa981cfd8.
|
2023-10-03 11:51:12 +02:00 |
|
yflory
|
d6a60075cd
|
Fix DrawIO hash
|
2023-10-03 11:40:55 +02:00 |
|
Mathilde Grünig
|
57dda59c4d
|
change NodeJS path to match new recommended installation method
|
2023-09-18 11:52:26 +02:00 |
|
Mathilde Grünig
|
87dc6e66d4
|
replace tabs by spaces, not rendered properly by GitHub
|
2023-09-05 13:22:15 +02:00 |
|
Mathilde Grünig
|
53f53d1a7e
|
fix two little header issues in Nginx advanced example
|
2023-09-05 13:21:16 +02:00 |
|
Mathilde Grünig
|
c756909a89
|
add new default Nginx example config file
|
2023-09-05 13:19:25 +02:00 |
|
Mathilde Grünig
|
bccfb28ac9
|
move old default Nginx example config to advanced file
|
2023-09-05 13:17:12 +02:00 |
|
Wolfgang Ginolas
|
a3772cf92c
|
Fix typo in example.nginx.conf
|
2023-08-10 16:00:46 +02:00 |
|
yflory
|
dc6bbec19f
|
Recovery page trailing slash redirect in nginx conf #1143
|
2023-07-18 17:35:18 +02:00 |
|
yflory
|
8b1aaaa9a7
|
Add missing trailing slash redirect for the diagram app
|
2023-07-13 11:12:31 +02:00 |
|
yflory
|
c10fc37645
|
Merge branch 'totp-ui' into 5.4-rc
|
2023-07-11 10:30:36 +02:00 |
|
yflory
|
b2788744de
|
Merge branch 'drawio-bower' into 5.4-rc
|
2023-06-30 12:45:54 +02:00 |
|
Wolfgang Ginolas
|
00af2c3efb
|
Update example nginx config for diagram
|
2023-06-29 11:22:41 +02:00 |
|
Mathilde Grünig
|
f5fb24031e
|
replace xwiki-labs by cryptpad
|
2023-05-16 14:54:39 +02:00 |
|
ansuz
|
bf548c1022
|
updated nginx config for new API server features
|
2023-05-11 17:06:46 +05:30 |
|
ansuz
|
493bf1346c
|
Merge tag '5.3.0' into 5.3-auth
|
2023-05-06 15:26:21 +05:30 |
|
ansuz
|
c27ff40db1
|
proxy requests for blocks to the API server
|
2023-05-06 14:41:22 +05:30 |
|
David Benque
|
d585d17359
|
Merge pull request #1004 from xwiki-labs/embedding-difficulty
invert NGINX settings to forbid remote embedding by default
|
2023-04-25 11:43:59 +01:00 |
|
Mathilde Grünig
|
166c20e081
|
add two lines explanation on hardening
|
2023-03-30 13:29:43 +02:00 |
|
Mathilde Grünig
|
2cd56842ec
|
add various systemd hardening directives
|
2023-03-30 10:17:19 +02:00 |
|
Mathilde Grünig
|
e80b6c2127
|
remove deprecated syslog parameters, now handled by journald
|
2023-03-30 10:16:18 +02:00 |
|
Mathilde Grünig
|
5df480b9f3
|
update latest stable Node version
|
2023-03-30 10:15:50 +02:00 |
|
ansuz
|
ee5d270d6a
|
Merge branch 'basic-auth' into authentication
|
2023-03-20 13:44:10 +05:30 |
|
ansuz
|
50c84949c8
|
invert NGINX settings to forbid remote embedding by default
|
2023-02-13 12:47:18 +05:30 |
|
Mathilde Grünig
|
0d7f1509b6
|
Add FreeBSD rc.d init script
|
2023-02-03 08:25:17 +01:00 |
|
Ente
|
c9fd6359aa
|
Send HTTP credentials when fetching blobs
With this change media-tag now sends HTTP credentials when fetching
blobs. Also changed the example nginx config to send
Access-Control-Allow-Credentials CORS headers. For this to work, we can
no longer use '*' for Access-Control-Allow-Origin [1][2]: Therefore the
example config was changed to set Access-Control-Allow-Origin to the
sandbox domain only.
Fixes:
- #705: Blob fetch fails with 401 Unauthorized when HTTP basic auth is enabled [3]
Referenes:
[1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
[2]: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSNotSupportingCredentials
[3]: https://github.com/xwiki-labs/cryptpad/issues/705
|
2022-12-14 11:27:51 +01:00 |
|
Mathilde Grünig
|
37ccaddbbe
|
2nd thought on HTTP/80, not needed in the end
|
2022-12-07 14:04:00 +01:00 |
|
Mathilde Grünig
|
1b731e2643
|
Add future-proof Nginx configuration
- support IPv6
- 80 to 443 redirect
- TLS generation
- better SSL sessions
- longer HSTS (2 years)
- OCSP stapling
|
2022-12-07 13:56:12 +01:00 |
|
ansuz
|
01cdfa1bbc
|
document yet another way that Safari/webkit is terrible
|
2022-10-05 15:17:07 +05:30 |
|
ansuz
|
8d7973850a
|
slightly smarter caching rules in example NGINX config
|
2022-09-13 18:34:30 +05:30 |
|
ansuz
|
c889823fca
|
fix custom file serving logic for static pages in NGINX
|
2022-09-06 14:36:23 +05:30 |
|
ansuz
|
4d022a2247
|
handle more cases for the cache-control header in NGINX
|
2022-09-06 14:35:13 +05:30 |
|
ansuz
|
aaa6efbbb0
|
better worst-case performance for static files served by NGINX
|
2022-07-22 16:46:02 +05:30 |
|
Maxime Cesson
|
c1adae6d59
|
Complete last commit (add og data to "Drive" and "File", handle missing config, modify nginx example config)
|
2022-07-21 18:44:21 +02:00 |
|
ansuz
|
8adeeb21ec
|
display instance info on the home page
* implements /api/instance
* updates recommended NGINX config
* adds a test on /checkup/
|
2022-05-03 18:20:34 +05:30 |
|
ansuz
|
01b6dd539b
|
add trailing slash if /convert/ is loaded without its trailing slash
|
2022-04-04 20:38:52 +05:30 |
|
ansuz
|
404b89eb28
|
update recommended settings for embedding to permit element desktop
|
2022-04-04 12:31:40 +05:30 |
|
ansuz
|
16b843c2c8
|
set x-content-type-options headers for blob and block in nginx example
|
2022-03-23 15:24:51 +05:30 |
|
ansuz
|
e1abf4ef77
|
nginx updates
|
2022-03-14 18:23:38 +05:30 |
|
ansuz
|
7b14c135b3
|
update example NGINX CSP configuration
|
2022-02-15 15:54:33 +05:30 |
|
ansuz
|
0f46869217
|
WIP update recommended production CSP values
|
2022-02-10 17:11:17 +05:30 |
|
ansuz
|
ae84d99af0
|
update the recommended settings for img-src and media-src
|
2022-01-21 17:48:53 +05:30 |
|
ansuz
|
31c5bba8db
|
update example NGINX config and changelog for 4.12.0
|
2021-10-20 18:42:02 +05:30 |
|
yflory
|
b050f04090
|
Fix CSP errors in oodoc and ooslide
|
2021-10-19 17:09:42 +02:00 |
|
ansuz
|
d2db0066a4
|
update example nginx config to match dev server
|
2021-10-19 17:56:55 +05:30 |
|
ansuz
|
34acded538
|
clarify comment in example nginx config
|
2021-08-27 14:07:23 +05:30 |
|
ansuz
|
f12a276c78
|
correct inconsistent capitalization of 'CryptPad' in markdown files.
Add a rule to the translation linter to detect future inconsistencies.
|
2021-08-13 15:44:11 +05:30 |
|
ansuz
|
3b44c09bc4
|
check COOP headers for multiple endpoints
and improve some error reporting in the checkup RPC
|
2021-07-01 16:42:09 +05:30 |
|
ansuz
|
0978074c74
|
add convert app to example nginx and update changelog
|
2021-06-30 19:31:48 +05:30 |
|
ansuz
|
14483814fd
|
update nginx trailing-slash rewrite for new apps
|
2021-06-15 03:52:54 +05:30 |
|
ansuz
|
32494fca0c
|
let NGINX handle its own headers
|
2021-05-12 14:29:29 +05:30 |
|
yflory
|
4d5d809447
|
Opt out of Google's FLoC Network by default
|
2021-04-22 12:24:05 +02:00 |
|
ansuz
|
49035f3aad
|
update example nginx config
|
2021-04-14 10:38:16 +05:30 |
|
ansuz
|
edd46ebdb2
|
add some admin UI for profiling the server's workers
|
2021-01-29 11:51:40 +05:30 |
|
ansuz
|
f0b707e54d
|
move admin-rpc code snippet to docs directory
|
2021-01-21 17:43:24 +05:30 |
|
ansuz
|
c806b97076
|
resolve conflicts between rebrand and staging
|
2020-12-29 17:20:53 +05:30 |
|
ansuz
|
affd221eb7
|
lint compliance
|
2020-12-29 17:08:48 +05:30 |
|
ansuz
|
38cfba275a
|
elaborate on some comments in example config files
|
2020-12-15 13:37:13 +05:30 |
|
yflory
|
2647acbb78
|
Expose Content-Length header
|
2020-12-07 15:42:25 +01:00 |
|
Christian Pietsch
|
bc2387256f
|
Set reasonable value for $PWD
/home/cryptpad/cryptpad/cryptpad seems one cryptpad too many, and it does not match the sample value of WorkingDirectory above
|
2020-11-05 19:23:08 +01:00 |
|
ansuz
|
aa547a7b76
|
align nodejs http headers with example nginx
|
2020-11-03 16:48:31 +05:30 |
|
ansuz
|
d3dd5f991d
|
proposed nginx configuration to enable XLSX export without disabling print from other apps
|
2020-11-03 16:48:31 +05:30 |
|
ansuz
|
a2b79d84b8
|
align nodejs http headers with example nginx
|
2020-10-27 08:12:23 +05:30 |
|
ansuz
|
a8f53d04fc
|
proposed nginx configuration to enable XLSX export without disabling print from other apps
|
2020-10-26 17:24:35 +05:30 |
|
ansuz
|
8c980df660
|
tell clients not to cache their outer html
|
2020-10-21 13:11:29 +05:30 |
|
ansuz
|
cfcfe2f65f
|
enable APIs for XLSX export in firefox
|
2020-10-07 14:47:43 +05:30 |
|
ansuz
|
737c42b447
|
update nginx.example.conf for latest rich text CSP
|
2020-06-29 16:51:58 -04:00 |
|
Adrian Nöthlich
|
68e33bb902
|
Remove docker related files
Signed-off-by: Adrian Nöthlich <git@promasu.tech>
|
2020-05-05 03:42:44 +02:00 |
|
ansuz
|
09bf0a54d8
|
add access control header
|
2020-04-09 16:30:22 -04:00 |
|
ansuz
|
54420109ac
|
update the open file limit in the example systemd service file
|
2020-03-16 12:32:45 -04:00 |
|
ansuz
|
ecce654ca6
|
add 'resource:' to script-src to enable shared-worker debugging in firefox
|
2020-02-17 12:48:10 -05:00 |
|
ansuz
|
1fc8c1de16
|
add missing connect-src directives to example nginx conf
|
2020-02-17 08:48:15 -05:00 |
|
ansuz
|
1be01c07ee
|
fix bad copypaste in the example nginx file
|
2020-02-10 13:04:58 -05:00 |
|
ansuz
|
95a2742b7a
|
add an example systemd service file
|
2020-01-21 14:08:26 -05:00 |
|
ansuz
|
47d9c4daeb
|
update onlyoffice detection to support sheet migration
|
2020-01-21 14:07:46 -05:00 |
|
ansuz
|
1b3c2a43bf
|
remove wss from connecSrc in example nginx config
|
2020-01-06 15:22:55 -05:00 |
|
ansuz
|
32bdfacd92
|
fix incorrectly pasted line
|
2020-01-04 11:56:09 -05:00 |
|
ansuz
|
75925b6ceb
|
fix blob support in example config
|
2020-01-04 01:39:37 -05:00 |
|
ansuz
|
80f3175a0e
|
simplify cipher list, better dhparams
|
2019-12-27 13:05:02 -05:00 |
|
ansuz
|
7c9b53695b
|
add a bunch of comments to all the mysterious sections of the nginx example config
also remove a large, complicated, unnecessary section
|
2019-12-26 18:23:52 -05:00 |
|