Subject | Hash | Author | Date (UTC) |
---|---|---|---|
Added TLS1.3 to the list of protocols for nginx | c9fe2cc833c1a9636eab4baa2c388b2ea073ecbb | Catalin(ux) M. BOIE | 2019-09-17 19:03:23 |
History updates | 3de26500d13dc1eafa00fa4721704c5cfe372fd7 | Catalin(ux) M. BOIE | 2019-09-17 19:01:08 |
Destroy confirmation link after use | 6794a957bf695525b1a171eb6b602d228fd0f725 | Catalin(ux) M. BOIE | 2019-04-01 17:41:47 |
Show rg_log_sid into the user output to help identifying the logs | f272e87bcb5fef0e34459c5025b3d4bc796dab6d | Catalin(ux) M. BOIE | 2018-08-29 21:40:36 |
SELinux updates | 04b76e731f34762838434e8412e283be7360d188 | Catalin(ux) M. BOIE | 2018-08-29 21:36:29 |
Corrected wrong help for ssh 2fa | 04f8223c0c8fc585d3c7882c17ba4ecb7c22d0b5 | Catalin(ux) M. BOIE | 2018-08-29 21:36:16 |
ldap changes | 89e6848701e4c27d0f089393c7591302c45c57d4 | Catalin(ux) M. BOIE | 2018-08-29 21:35:56 |
Allow login token to be appended to the password | 8a5b003845f54d2771beaec7b14b96b2029ee9db | Catalin(ux) M. BOIE | 2018-08-29 21:35:16 |
Cosmetic changes for the theme | e8ed0db5fd9b41c5a63e1e171adb615a33817da8 | Catalin(ux) M. BOIE | 2018-08-29 21:32:36 |
samples updated | b42d3dd5947ae9bcf3994854219e759d93abcafa | Catalin(ux) M. BOIE | 2018-08-29 21:32:03 |
docker updates | f26097f046666d3ab5ca96e69f6fc458188a33ed | Catalin(ux) M. BOIE | 2018-08-29 21:31:16 |
Cosmetic changes | d5069178bed9736db02c3233e95564ad7b429e17 | Catalin(ux) M. BOIE | 2018-08-29 21:30:42 |
tests: added helper for totp enrollment | bad21ca093b427b200b3fbdcf2a2e1dd1820f93a | Catalin(ux) M. BOIE | 2018-08-29 20:59:17 |
Store the timestamp of the deletion for a repo, not 1 | e761b36efaa37fc3c453e8382127e340bc736bc7 | Catalin(ux) M. BOIE | 2018-06-04 18:00:35 |
totp: urlencode must be used when building the url for 2fa | f85ea05bf4b456cc0430e78f2705347dc79343ae | Catalin(ux) M. BOIE | 2018-05-29 17:39:06 |
totp: remove expired entries | 06cd360eff667740bcf8a580447cb86f3c2e6850 | Catalin(ux) M. BOIE | 2018-05-29 17:38:16 |
Show disk size in users list | 9cc05cb0307cf31d6d2ebacda0846b0774e704d7 | Catalin(ux) M. BOIE | 2017-12-25 08:09:22 |
Added timeout for ldap bind/search operations | 502fbf1287f1ad37f7c6c82c473c9b472d3fa65a | Catalin(ux) M. BOIE | 2017-11-26 15:46:51 |
Default uid_attr for ldap is now 'uid' | 6e3993359d506d76ec739dd87fa682eea6b5a3b6 | Catalin(ux) M. BOIE | 2017-11-26 14:57:58 |
lock cache must not store 'ok' field | 5a600b275fcf50c2df2cb0253a80aa99ae145b0d | Catalin(ux) M. BOIE | 2017-11-26 14:41:33 |
File | Lines added | Lines deleted |
---|---|---|
rocketgit.spec.in | 1 | 1 |
samples/nginx.conf | 2 | 1 |
samples/rg.conf | 1 | 1 |
File rocketgit.spec.in changed (mode: 100644) (index 1d19fca..8b4e6c6) | |||
... | ... | BuildRoot: %{_tmppath}/%{name}-%{version}-buildroot | |
16 | 16 | BuildArch: noarch | BuildArch: noarch |
17 | 17 | Requires: httpd-filesystem, nginx-filesystem, php-fpm, php-cli, php-pgsql | Requires: httpd-filesystem, nginx-filesystem, php-fpm, php-cli, php-pgsql |
18 | 18 | Requires: git, cronie, xinetd | Requires: git, cronie, xinetd |
19 | Requires: util-linux | ||
19 | Requires: util-linux, qrencode | ||
20 | 20 | # SELinux stuff | # SELinux stuff |
21 | 21 | # https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft?rd=PackagingDrafts/SELinux/PolicyModules | # https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft?rd=PackagingDrafts/SELinux/PolicyModules |
22 | 22 | BuildRequires: checkpolicy, selinux-policy-devel, hardlink, systemd, php-cli | BuildRequires: checkpolicy, selinux-policy-devel, hardlink, systemd, php-cli |
File samples/nginx.conf changed (mode: 100644) (index c4a7885..4264d14) | |||
... | ... | server { | |
84 | 84 | ||
85 | 85 | # Security (ClickJacking) | # Security (ClickJacking) |
86 | 86 | add_header X-Frame-Options DENY; | add_header X-Frame-Options DENY; |
87 | # Security (STS) | ||
87 | 88 | add_header Strict-Transport-Security "max-age=31536000"; | add_header Strict-Transport-Security "max-age=31536000"; |
88 | 89 | ||
89 | 90 | access_log /var/log/nginx/rg-ssl-access.log; | access_log /var/log/nginx/rg-ssl-access.log; |
... | ... | server { | |
128 | 129 | # Specify the cyphers to get an A+ on Qualys (ssllabs.com); recommended | # Specify the cyphers to get an A+ on Qualys (ssllabs.com); recommended |
129 | 130 | # https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm | # https://www.digicert.com/ssl-support/ssl-enabling-perfect-forward-secrecy.htm |
130 | 131 | ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"; | ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"; |
131 | ssl_protocols TLSv1.2; | ||
132 | ssl_protocols TLSv1.2 TLS1.3; | ||
132 | 133 | ssl_session_cache shared:SSL:10m; | ssl_session_cache shared:SSL:10m; |
133 | 134 | ssl_session_timeout 120m; | ssl_session_timeout 120m; |
134 | 135 |
File samples/rg.conf changed (mode: 100644) (index a9bcdd8..11a6860) | |||
106 | 106 | <IfModule mod_headers.c> | <IfModule mod_headers.c> |
107 | 107 | # Security (ClickJacking) | # Security (ClickJacking) |
108 | 108 | Header always append X-Frame-Options DENY | Header always append X-Frame-Options DENY |
109 | # Add this for SSL | ||
109 | # Security (STS) | ||
110 | 110 | Header set Strict-Transport-Security "max-age=31536000" | Header set Strict-Transport-Security "max-age=31536000" |
111 | 111 | </IfModule> | </IfModule> |
112 | 112 |