Subject | Hash | Author | Date (UTC) |
---|---|---|---|
Improved nginx ssl configuration (mostly stapling) | a029f78cc3f66605dd95dfcc2abc9976ee1f7076 | Catalin(ux) M. BOIE | 2020-08-06 05:05:49 |
Tutorials updates (artifacts and CI) | 36ee6f7b792f32a8567c3f2f31088559ab6cd27a | Catalin(ux) M. BOIE | 2020-08-05 06:16:33 |
Added Markdown test | 23455db9b6ce8a82245f06de6e3d7c7e6b706464 | Catalin(ux) M. BOIE | 2020-07-31 05:41:46 |
Some SELinux cosmetic | 3bafeaa06231a67dcc66d37b50a6f5411b2bfbf9 | Catalin(ux) M. BOIE | 2020-07-31 05:41:28 |
Mostly cosmetic plus some tests | 1a538fff7a4886395612471211eeca0c091e6864 | Catalin(ux) M. BOIE | 2020-07-31 05:41:02 |
Added a custom Markdown parser | 67b9687fb858ba1018d58edd276836a0411acd1e | Catalin(ux) M. BOIE | 2020-07-31 05:39:49 |
Add an index variable to rg_template_table | f310f34a6c9a2a029d479d14d86e8ea2393ee3dd | Catalin(ux) M. BOIE | 2020-07-31 05:39:29 |
Mostly cosmetic in Source page | cac471307a58104fbfa7838b34a7e2ffd2e05260 | Catalin(ux) M. BOIE | 2020-07-31 05:38:48 |
Do not log bots connections | ef9cdff6a0cbd559f1833e46a66cbbbe726d3d99 | Catalin(ux) M. BOIE | 2020-07-31 05:38:13 |
Comparison update | b67344452d66b2ed8ef53f65470d53f8b40fe59e | Catalin(ux) M. BOIE | 2020-07-31 05:37:38 |
Minor fix for a variable type mismatch | a0680065333729b91558e77a6df4403ce8f5b1a5 | Catalin(ux) M. BOIE | 2020-07-31 05:37:20 |
Minor git fixes | a21b35cd0f87b844fe5ce4b8b2e14fab2506296e | Catalin(ux) M. BOIE | 2020-07-31 05:36:43 |
Docker updates | d3e9cd4e358cac2d4018dcf7dc681288445a679f | Catalin(ux) M. BOIE | 2020-07-31 05:36:08 |
Admin report improvements | b527baab12e2e08998672559b0f33fc6df15e74c | Catalin(ux) M. BOIE | 2020-07-31 05:35:25 |
Cosmetic | 30c879d625b094a33bd9a2165c67a8a11e802f42 | Catalin(ux) M. BOIE | 2020-07-31 05:34:19 |
Builder, worker and web updates for artifacts | c82a7143a24ec987e0d98bb58327ef15bc602d0d | Catalin(ux) M. BOIE | 2020-07-31 05:30:44 |
Prevent bots to create accounts | 3eacd8103e9a039f3f8585a59c27fdff6fd66ca4 | Catalin(ux) M. BOIE | 2020-07-08 05:25:37 |
css: Force the footer to the bottom using flex | f89dddc9fa6b2c131448996cc51349e00224eea6 | Catalin(ux) M. BOIE | 2020-07-04 04:15:03 |
docs: css tweaks | d270a286b160bb5de39ade5d99a58fe26e03b2d5 | Catalin(ux) M. BOIE | 2020-06-30 17:21:02 |
Improved admin report | 9fa82cc2878886c2195cdd3f334dd532b3ea6a22 | Catalin(ux) M. BOIE | 2020-06-28 10:19:24 |
File | Lines added | Lines deleted |
---|---|---|
samples/nginx.conf | 9 | 4 |
File samples/nginx.conf changed (mode: 100644) (index a941e89..9ce6ab7) | |||
... | ... | server { | |
134 | 134 | fastcgi_pass unix:/run/rocketgit.sock; | fastcgi_pass unix:/run/rocketgit.sock; |
135 | 135 | } | } |
136 | 136 | ||
137 | ssl_protocols TLSv1.2 TLSv1.3; | ||
137 | 138 | ssl_certificate /etc/pki/tls/certs/localhost.crt; | ssl_certificate /etc/pki/tls/certs/localhost.crt; |
138 | 139 | ssl_certificate_key /etc/pki/tls/private/localhost.key; | ssl_certificate_key /etc/pki/tls/private/localhost.key; |
139 | ssl_prefer_server_ciphers on; | ||
140 | 140 | # Specify the cyphers to get an A+ on Qualys (ssllabs.com); recommended | # Specify the cyphers to get an A+ on Qualys (ssllabs.com); recommended |
141 | 141 | # https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm | # https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm |
142 | ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"; | ||
143 | ssl_protocols TLSv1.2 TLSv1.3; | ||
142 | # Generated by: https://ssl-config.mozilla.org | ||
143 | ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; | ||
144 | 144 | ssl_session_cache shared:SSL:60m; | ssl_session_cache shared:SSL:60m; |
145 | ssl_session_timeout 120m; | ||
145 | ssl_session_timeout 1d; | ||
146 | ssl_session_tickets off; | ||
147 | |||
148 | #ssl_stapling on; | ||
149 | #ssl_trusted_certificate /etc/letsencrypt/live/r1.embedromix.ro/chain.pem; | ||
150 | #ssl_stapling_verify on; | ||
146 | 151 | ||
147 | 152 | # https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning | # https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning |
148 | 153 | # To generate pin-sha256 string: openssl s_client -servername <server> -connect <server>:443 | openssl x509 -pubkey -noout | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64 | # To generate pin-sha256 string: openssl s_client -servername <server> -connect <server>:443 | openssl x509 -pubkey -noout | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64 |