List of commits:
Subject Hash Author Date (UTC)
Added TLS1.3 to the list of protocols for nginx c9fe2cc833c1a9636eab4baa2c388b2ea073ecbb Catalin(ux) M. BOIE 2019-09-17 19:03:23
History updates 3de26500d13dc1eafa00fa4721704c5cfe372fd7 Catalin(ux) M. BOIE 2019-09-17 19:01:08
Destroy confirmation link after use 6794a957bf695525b1a171eb6b602d228fd0f725 Catalin(ux) M. BOIE 2019-04-01 17:41:47
Show rg_log_sid into the user output to help identifying the logs f272e87bcb5fef0e34459c5025b3d4bc796dab6d Catalin(ux) M. BOIE 2018-08-29 21:40:36
SELinux updates 04b76e731f34762838434e8412e283be7360d188 Catalin(ux) M. BOIE 2018-08-29 21:36:29
Corrected wrong help for ssh 2fa 04f8223c0c8fc585d3c7882c17ba4ecb7c22d0b5 Catalin(ux) M. BOIE 2018-08-29 21:36:16
ldap changes 89e6848701e4c27d0f089393c7591302c45c57d4 Catalin(ux) M. BOIE 2018-08-29 21:35:56
Allow login token to be appended to the password 8a5b003845f54d2771beaec7b14b96b2029ee9db Catalin(ux) M. BOIE 2018-08-29 21:35:16
Cosmetic changes for the theme e8ed0db5fd9b41c5a63e1e171adb615a33817da8 Catalin(ux) M. BOIE 2018-08-29 21:32:36
samples updated b42d3dd5947ae9bcf3994854219e759d93abcafa Catalin(ux) M. BOIE 2018-08-29 21:32:03
docker updates f26097f046666d3ab5ca96e69f6fc458188a33ed Catalin(ux) M. BOIE 2018-08-29 21:31:16
Cosmetic changes d5069178bed9736db02c3233e95564ad7b429e17 Catalin(ux) M. BOIE 2018-08-29 21:30:42
tests: added helper for totp enrollment bad21ca093b427b200b3fbdcf2a2e1dd1820f93a Catalin(ux) M. BOIE 2018-08-29 20:59:17
Store the timestamp of the deletion for a repo, not 1 e761b36efaa37fc3c453e8382127e340bc736bc7 Catalin(ux) M. BOIE 2018-06-04 18:00:35
totp: urlencode must be used when building the url for 2fa f85ea05bf4b456cc0430e78f2705347dc79343ae Catalin(ux) M. BOIE 2018-05-29 17:39:06
totp: remove expired entries 06cd360eff667740bcf8a580447cb86f3c2e6850 Catalin(ux) M. BOIE 2018-05-29 17:38:16
Show disk size in users list 9cc05cb0307cf31d6d2ebacda0846b0774e704d7 Catalin(ux) M. BOIE 2017-12-25 08:09:22
Added timeout for ldap bind/search operations 502fbf1287f1ad37f7c6c82c473c9b472d3fa65a Catalin(ux) M. BOIE 2017-11-26 15:46:51
Default uid_attr for ldap is now 'uid' 6e3993359d506d76ec739dd87fa682eea6b5a3b6 Catalin(ux) M. BOIE 2017-11-26 14:57:58
lock cache must not store 'ok' field 5a600b275fcf50c2df2cb0253a80aa99ae145b0d Catalin(ux) M. BOIE 2017-11-26 14:41:33
Commit c9fe2cc833c1a9636eab4baa2c388b2ea073ecbb - Added TLS1.3 to the list of protocols for nginx
Author: Catalin(ux) M. BOIE
Author date (UTC): 2019-09-17 19:03
Committer name: Catalin(ux) M. BOIE
Committer date (UTC): 2019-09-17 19:03
Parent(s): 3de26500d13dc1eafa00fa4721704c5cfe372fd7
Signer:
Signing key:
Signing status: N
Tree: 9cac5b7199b8bcafa29ddb83b747958485dc90df
File Lines added Lines deleted
rocketgit.spec.in 1 1
samples/nginx.conf 2 1
samples/rg.conf 1 1
File rocketgit.spec.in changed (mode: 100644) (index 1d19fca..8b4e6c6)
... ... BuildRoot: %{_tmppath}/%{name}-%{version}-buildroot
16 16 BuildArch: noarch BuildArch: noarch
17 17 Requires: httpd-filesystem, nginx-filesystem, php-fpm, php-cli, php-pgsql Requires: httpd-filesystem, nginx-filesystem, php-fpm, php-cli, php-pgsql
18 18 Requires: git, cronie, xinetd Requires: git, cronie, xinetd
19 Requires: util-linux
19 Requires: util-linux, qrencode
20 20 # SELinux stuff # SELinux stuff
21 21 # https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft?rd=PackagingDrafts/SELinux/PolicyModules # https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft?rd=PackagingDrafts/SELinux/PolicyModules
22 22 BuildRequires: checkpolicy, selinux-policy-devel, hardlink, systemd, php-cli BuildRequires: checkpolicy, selinux-policy-devel, hardlink, systemd, php-cli
File samples/nginx.conf changed (mode: 100644) (index c4a7885..4264d14)
... ... server {
84 84
85 85 # Security (ClickJacking) # Security (ClickJacking)
86 86 add_header X-Frame-Options DENY; add_header X-Frame-Options DENY;
87 # Security (STS)
87 88 add_header Strict-Transport-Security "max-age=31536000"; add_header Strict-Transport-Security "max-age=31536000";
88 89
89 90 access_log /var/log/nginx/rg-ssl-access.log; access_log /var/log/nginx/rg-ssl-access.log;
 
... ... server {
128 129 # Specify the cyphers to get an A+ on Qualys (ssllabs.com); recommended # Specify the cyphers to get an A+ on Qualys (ssllabs.com); recommended
129 130 # https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm # https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm
130 131 ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"; ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
131 ssl_protocols TLSv1.2;
132 ssl_protocols TLSv1.2 TLS1.3;
132 133 ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
133 134 ssl_session_timeout 120m; ssl_session_timeout 120m;
134 135
File samples/rg.conf changed (mode: 100644) (index a9bcdd8..11a6860)
106 106 <IfModule mod_headers.c> <IfModule mod_headers.c>
107 107 # Security (ClickJacking) # Security (ClickJacking)
108 108 Header always append X-Frame-Options DENY Header always append X-Frame-Options DENY
109 # Add this for SSL
109 # Security (STS)
110 110 Header set Strict-Transport-Security "max-age=31536000" Header set Strict-Transport-Security "max-age=31536000"
111 111 </IfModule> </IfModule>
112 112
Hints:
Before first commit, do not forget to setup your git environment:
git config --global user.name "your_name_here"
git config --global user.email "your@email_here"

Clone this repository using HTTP(S):
git clone https://rocketgit.com/user/catalinux/rocketgit

Clone this repository using ssh (do not forget to upload a key first):
git clone ssh://rocketgit@ssh.rocketgit.com/user/catalinux/rocketgit

Clone this repository using git:
git clone git://git.rocketgit.com/user/catalinux/rocketgit

You are allowed to anonymously push to this repository.
This means that your pushed commits will automatically be transformed into a merge request:
... clone the repository ...
... make some changes and some commits ...
git push origin main