summaryrefslogtreecommitdiff
path: root/lib/support/nginx/gitlab-ssl
Commit message (Collapse)AuthorAgeFilesLines
...
* Merge pull request #8054 from bbodenmiller/patch-4Dmitriy Zaporozhets2014-10-221-8/+6
|\ | | | | match latest config from https://cipherli.st/
| * match latest config from https://cipherli.st/Ben Bodenmiller2014-10-151-8/+6
| |
* | simplify DHE parameter generationBen Bodenmiller2014-10-161-2/+1
|/
* Add a comment on why we are using backward compatible ciphers.Marin Jankovski2014-10-101-3/+4
|
* Revert "update ssl_ciphers"Marin Jankovski2014-10-101-1/+1
| | | | This reverts commit c41e5f5018d059a9c57d2c19088e6c274cc60e10.
* Merge pull request #7664 from bbodenmiller/patch-2Sytse Sijbrandij2014-10-031-0/+2
|\ | | | | add HSTS Policy warning
| * add HSTS Policy warningBen Bodenmiller2014-09-011-0/+2
| | | | | | Add warning about HSTS header as it means user will need to provide secure connection access to site for next 24 months from page view. See https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security for more details.
* | fail_timeout=0 as recommended by UnicornBen Bodenmiller2014-09-121-1/+1
| | | | | | | | | | | | Set's fail_timeout=0 as recommended by http://unicorn.bogomips.org/Unicorn/Configurator.html#method-i-timeout when Unicorn is running behind nginx.
* | Merge pull request #7654 from bbodenmiller/patch-13Sytse Sijbrandij2014-09-081-1/+1
|\ \ | | | | | | update ssl_ciphers
| * | update ssl_ciphersBen Bodenmiller2014-09-071-1/+1
| |/ | | | | | | | | | | | | | | | | taken from https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html / https://cipherli.st/ backwards compatible ciphers not needed since gitlab does not support ie8
* | Merge pull request #7583 from bbodenmiller/httpsSytse Sijbrandij2014-09-081-12/+1
|\ \ | | | | | | [Documentation] simplify HTTPS setup details
| * | simplify HTTPS setup detailsBen Bodenmiller2014-09-071-12/+1
| |/ | | | | | | also adds comment about updating nginx files during upgrades
* | add optional nginx configs to make more secureBen Bodenmiller2014-09-071-0/+17
|/
* Merge pull request #7378 from jojosch/nginx-ssl-redirectDmitriy Zaporozhets2014-08-281-1/+1
|\ | | | | Use a ? after the $request_uri to perform a valid Redirect while cloning...
| * Use a ? after the $request_uri to perform a valid Redirect while cloning.johannes2014-08-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fixes #6203 before: ❯ curl -I http://gitlab/namespace/repo.git/info/refs?service=git-upload-pack HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 26 Jul 2014 18:20:27 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://gitlab/namespace/repo.git/info/refs?service=git-upload-pack?service=git-upload-pack after: ❯ curl -I http://gitlab/namespace/repo.git/info/refs\?service=git-upload-pack HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 26 Jul 2014 18:23:54 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://gitlab/namespace/repo.git/info/refs?service=git-upload-pack [ci skip]
* | Merge pull request #7558 from bbodenmiller/patch-4Dmitriy Zaporozhets2014-08-231-1/+1
|\ \ | | | | | | change X-Frame-Options to SAMEORIGIN for nginx SSL config
| * | change X-Frame-Options to SAMEORIGINBen Bodenmiller2014-08-231-1/+1
| |/ | | | | needed to allow sidekiq to load on background jobs tab
* | unify nginx config filesBen Bodenmiller2014-08-231-7/+9
|/
* Simplify the description of single hash lines based on comments of Ben ↵Sytse Sijbrandij2014-08-221-2/+1
| | | | Bodenmiller.
* Simplify the ssl setup file.Sytse Sijbrandij2014-08-041-56/+27
|
* Move gitlab-ssl nginx config from gitlab-recipesAchilleas Pipinellis2014-06-051-0/+164