List of commits:
Subject Hash Author Date (UTC)
Improved nginx ssl configuration (mostly stapling) a029f78cc3f66605dd95dfcc2abc9976ee1f7076 Catalin(ux) M. BOIE 2020-08-06 05:05:49
Tutorials updates (artifacts and CI) 36ee6f7b792f32a8567c3f2f31088559ab6cd27a Catalin(ux) M. BOIE 2020-08-05 06:16:33
Added Markdown test 23455db9b6ce8a82245f06de6e3d7c7e6b706464 Catalin(ux) M. BOIE 2020-07-31 05:41:46
Some SELinux cosmetic 3bafeaa06231a67dcc66d37b50a6f5411b2bfbf9 Catalin(ux) M. BOIE 2020-07-31 05:41:28
Mostly cosmetic plus some tests 1a538fff7a4886395612471211eeca0c091e6864 Catalin(ux) M. BOIE 2020-07-31 05:41:02
Added a custom Markdown parser 67b9687fb858ba1018d58edd276836a0411acd1e Catalin(ux) M. BOIE 2020-07-31 05:39:49
Add an index variable to rg_template_table f310f34a6c9a2a029d479d14d86e8ea2393ee3dd Catalin(ux) M. BOIE 2020-07-31 05:39:29
Mostly cosmetic in Source page cac471307a58104fbfa7838b34a7e2ffd2e05260 Catalin(ux) M. BOIE 2020-07-31 05:38:48
Do not log bots connections ef9cdff6a0cbd559f1833e46a66cbbbe726d3d99 Catalin(ux) M. BOIE 2020-07-31 05:38:13
Comparison update b67344452d66b2ed8ef53f65470d53f8b40fe59e Catalin(ux) M. BOIE 2020-07-31 05:37:38
Minor fix for a variable type mismatch a0680065333729b91558e77a6df4403ce8f5b1a5 Catalin(ux) M. BOIE 2020-07-31 05:37:20
Minor git fixes a21b35cd0f87b844fe5ce4b8b2e14fab2506296e Catalin(ux) M. BOIE 2020-07-31 05:36:43
Docker updates d3e9cd4e358cac2d4018dcf7dc681288445a679f Catalin(ux) M. BOIE 2020-07-31 05:36:08
Admin report improvements b527baab12e2e08998672559b0f33fc6df15e74c Catalin(ux) M. BOIE 2020-07-31 05:35:25
Cosmetic 30c879d625b094a33bd9a2165c67a8a11e802f42 Catalin(ux) M. BOIE 2020-07-31 05:34:19
Builder, worker and web updates for artifacts c82a7143a24ec987e0d98bb58327ef15bc602d0d Catalin(ux) M. BOIE 2020-07-31 05:30:44
Prevent bots to create accounts 3eacd8103e9a039f3f8585a59c27fdff6fd66ca4 Catalin(ux) M. BOIE 2020-07-08 05:25:37
css: Force the footer to the bottom using flex f89dddc9fa6b2c131448996cc51349e00224eea6 Catalin(ux) M. BOIE 2020-07-04 04:15:03
docs: css tweaks d270a286b160bb5de39ade5d99a58fe26e03b2d5 Catalin(ux) M. BOIE 2020-06-30 17:21:02
Improved admin report 9fa82cc2878886c2195cdd3f334dd532b3ea6a22 Catalin(ux) M. BOIE 2020-06-28 10:19:24
Commit a029f78cc3f66605dd95dfcc2abc9976ee1f7076 - Improved nginx ssl configuration (mostly stapling)
Author: Catalin(ux) M. BOIE
Author date (UTC): 2020-08-06 05:05
Committer name: Catalin(ux) M. BOIE
Committer date (UTC): 2020-08-06 05:05
Parent(s): 36ee6f7b792f32a8567c3f2f31088559ab6cd27a
Signer:
Signing key:
Signing status: N
Tree: 5d634ef01c1b9f3da561e3cead7bf2f29b020e65
File Lines added Lines deleted
samples/nginx.conf 9 4
File samples/nginx.conf changed (mode: 100644) (index a941e89..9ce6ab7)
... ... server {
134 134 fastcgi_pass unix:/run/rocketgit.sock; fastcgi_pass unix:/run/rocketgit.sock;
135 135 } }
136 136
137 ssl_protocols TLSv1.2 TLSv1.3;
137 138 ssl_certificate /etc/pki/tls/certs/localhost.crt; ssl_certificate /etc/pki/tls/certs/localhost.crt;
138 139 ssl_certificate_key /etc/pki/tls/private/localhost.key; ssl_certificate_key /etc/pki/tls/private/localhost.key;
139 ssl_prefer_server_ciphers on;
140 140 # Specify the cyphers to get an A+ on Qualys (ssllabs.com); recommended # Specify the cyphers to get an A+ on Qualys (ssllabs.com); recommended
141 141 # https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm # https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm
142 ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
143 ssl_protocols TLSv1.2 TLSv1.3;
142 # Generated by: https://ssl-config.mozilla.org
143 ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
144 144 ssl_session_cache shared:SSL:60m; ssl_session_cache shared:SSL:60m;
145 ssl_session_timeout 120m;
145 ssl_session_timeout 1d;
146 ssl_session_tickets off;
147
148 #ssl_stapling on;
149 #ssl_trusted_certificate /etc/letsencrypt/live/r1.embedromix.ro/chain.pem;
150 #ssl_stapling_verify on;
146 151
147 152 # https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning # https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning
148 153 # To generate pin-sha256 string: openssl s_client -servername <server> -connect <server>:443 | openssl x509 -pubkey -noout | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64 # To generate pin-sha256 string: openssl s_client -servername <server> -connect <server>:443 | openssl x509 -pubkey -noout | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64
Hints:
Before first commit, do not forget to setup your git environment:
git config --global user.name "your_name_here"
git config --global user.email "your@email_here"

Clone this repository using HTTP(S):
git clone https://rocketgit.com/user/catalinux/rocketgit

Clone this repository using ssh (do not forget to upload a key first):
git clone ssh://rocketgit@ssh.rocketgit.com/user/catalinux/rocketgit

Clone this repository using git:
git clone git://git.rocketgit.com/user/catalinux/rocketgit

You are allowed to anonymously push to this repository.
This means that your pushed commits will automatically be transformed into a merge request:
... clone the repository ...
... make some changes and some commits ...
git push origin main