28 Commits (2b62cccd75e9025fb66148bcb1feea2a458ee8e4)

Author	SHA1	Message	Date
Felix Ableitner	5284d4028c	Don't include `preload` flag in sample HSTS header ... This goes against the recommendations (preloading should be opt-in). Putting it in the example makes it likely that people enable it without knowing what it means. https://hstspreload.org/?domain=peertube.social#opt-in	2018-09-11 20:10:57 +02:00
Rigel Kent	6328da8c01	make HSTS opt-in and leave it to the reverse-proxy	2018-09-09 22:10:38 +02:00
Micah Elizabeth Scott	a18e02f358	Only enable gzip for HTML/CSS/JS ... No compression on JSON endpoints, in order to protect from potential compression+encryption data leak attacks (like BREACH)	2018-08-24 09:08:33 +02:00
Micah Elizabeth Scott	b9ad995605	Add gzip support to the sample nginx configuration ... Without gzip explicitly enabled, load times suffer from transferring over a megabyte of plaintext javascript. With gzip enabled, the bundle is down to about 300K, and loads much faster. This change does not enable gzip on files that are already compressed, so images, fonts, and videos will be sent without the CPU overhead.	2018-08-24 09:08:33 +02:00
Chocobozzz	a8bf1d826e	404 on unknown thumbnail	2018-07-24 18:03:40 +02:00
Chocobozzz	7f8db30ccd	Add cors to static route in nginx template	2018-07-24 18:03:39 +02:00
Rigel Kent	828fdd08b7	(nginx) remove headers now dealt with helmet	2018-07-18 10:21:59 +02:00
Chocobozzz	57a81ff649	Fix static avatars/thumbnails cache	2018-07-17 19:04:41 +02:00
Chocobozzz	34b1919290	Increase upload limit to 8GB (test)	2018-06-29 17:10:53 +02:00
Chocobozzz	051bf3f773	Revert "Selective route permission to use embeds, fixes #322 in a better way (#364)" (#365) ... This reverts commit d40cd86bf5.	2018-03-20 17:39:36 +01:00
Rigel Kent	d40cd86bf5	Selective route permission to use embeds, fixes #322 in a better way (#364)	2018-03-20 17:28:41 +01:00
Valvin	446f78d7b4	Remove X-Frame options in nginx config (#322) ... `X-Frame-Options DENY;` doesn't permit sharing using iframe	2018-03-05 09:40:36 +01:00
Chocobozzz	4919b6304f	Fix nginx configuration that do not work with import-videos script	2018-03-01 17:14:57 +01:00
Chocobozzz	0b49571268	Try to improve production guide	2018-02-16 11:04:12 +01:00
Rigel Kent	e883399fa6	Precisions and security enhancements to the production guide (#287) ... - added precisions and suggestions about how to generate Let's Encrypt certificates. Users have reported their installations didn't work when the problem came from missing certificates (false positives). - security defaults of Nginx follow the basic robustness principle "be conservative in what you send, be liberal in what you accept", which isn't enough with modern security standards, so we should be picky with the cipher suites we use, among other things. Extra comments (especially for the TLS1.3 protocol support parameter) make the requirement of a recent Nginx installation obvious, and the downgrade alternative remains clear to the system administrator. All in all, we should aknowledge users will most often copy and paste the configuration files. Making them secure by default may force a few users to read their configuration, but on the long run we are making the fediverse more secure. Since I've come to modify a bit the Nginx config in `support/doc/production.md`, I've merged it with the template so that they stay consistent.	2018-02-14 11:11:49 +01:00
Chocobozzz	59c48d49c5	Peertube home in /var/www instead of /home	2018-01-23 09:00:23 +01:00
Chocobozzz	2e866cc75d	Don't serve previews with nginx ... We need to maintain a cache in the node process	2018-01-18 18:45:27 +01:00
Chocobozzz	5668bf2e51	nginx optimizations	2018-01-18 17:45:49 +01:00
Chocobozzz	d2000ca6e7	Update production guide ... Use release that already contains build files. It requires a specific directories tree but I think it would be fine.	2018-01-15 18:07:08 +01:00
Chocobozzz	85cd9bde5a	Remove unused webserver configuration ... And update nginx configuration with a rate limit	2018-01-11 10:46:49 +01:00
Fernandez, ReK2	99eff32c00	change nginx config to fix deprecation of a old module (#175)	2018-01-06 18:07:52 +01:00
Chocobozzz	7e9334c34d	Add ability to unfollow a server	2017-11-27 19:40:52 +01:00
Chocobozzz	b9a20e5947	Fix nginx https template	2017-10-19 17:42:39 +02:00
Chocobozzz	aa83bcce54	Increase client_max_body_size in NGinx template	2017-10-17 11:46:07 +02:00
Chocobozzz	c97eea23d7	Add peertube https nginx template	2016-11-25 14:21:41 +01:00
Chocobozzz	5e9acecaeb	Update NGinx template (uploads -> videos)	2016-10-26 20:28:34 +02:00
Chocobozzz	1f0f84c27e	Update NGinx that bypass /static/webseed (better performances)	2016-10-10 21:21:19 +02:00
Chocobozzz	5d4e941100	Add nginx example file	2016-06-03 15:56:40 +02:00