Asif Bacchus
0a99c75a91
feature(HELPERSCRIPTS): add text formatting functions
2021-01-15 05:47:00 -07:00
Asif Bacchus
cb794e755f
refactor(HELPERSCRIPTS): remove restart option
...
- cannot account for all possible custom configurations
- restart should be manual
2021-01-15 05:40:42 -07:00
Asif Bacchus
d29bff3324
style(HELPERSCRIPTS): change results banner format to match others
2021-01-15 05:19:52 -07:00
Asif Bacchus
cbaadc40c4
feature(HELPERSCRIPTS): add conditionality to script update
2021-01-15 05:18:55 -07:00
Asif Bacchus
7e96583455
feature(HELPERSCRIPTS): conditionally update docker container
...
- move previous prerequisite checks related to docker
2021-01-15 05:15:38 -07:00
Asif Bacchus
19a8f3a082
feature(HELPERSCRIPTS): add parameter processing skeleton
2021-01-15 05:08:03 -07:00
Asif Bacchus
cbb8595380
refactor(NGINX): auto-load certificates
...
- use container-bound certificates by default
- do not use separate certificate loading include
2021-01-08 22:02:22 -07:00
Asif Bacchus
c240708a78
Docs(README) reformat TOC
2021-01-08 14:39:21 -07:00
Asif Bacchus
8de6a3b5b2
chore(GIT): ignore all checksum files
2021-01-07 15:51:14 -07:00
Asif Bacchus
0e00bff2d2
docs(SCRIPTS): reformat and expand comments
2021-01-07 15:48:00 -07:00
Asif Bacchus
7fb6fb02ee
style(SCRIPTS): cleanup in-line help
2021-01-07 15:22:36 -07:00
Asif Bacchus
7c0616afe1
build(GIT): move helper scripts to own directory
2021-01-07 15:06:38 -07:00
Asif Bacchus
d742bdf9ab
refactor(CONFIG): update sample configuration defaults
2021-01-07 15:04:04 -07:00
Asif Bacchus
a1c1ac280a
struct(MOVE): move security headers to snippets from configs
2021-01-07 15:03:24 -07:00
Asif Bacchus
e8b80833e6
update readme - permissions section
2021-01-07 14:33:52 -07:00
Asif Bacchus
77b1b74df3
update gitattributes
2021-01-07 14:33:13 -07:00
Asif Bacchus
5132e6f2e2
fix(DOCKERFILE): terminate with SIGQUIT for NGINX
2021-01-07 13:34:09 -07:00
Asif Bacchus
00fcd6dd10
refactor(NGINX): move tmp paths to accessible locations for limited user
2021-01-07 13:31:04 -07:00
Asif Bacchus
d293e7b3e9
fix(DOCKERFILE): properly remove entrypoint script from parent container
2021-01-07 13:25:57 -07:00
Asif Bacchus
67e9a699d9
refactor(DOCKERFILE): change UID
2021-01-07 11:25:12 -07:00
Asif Bacchus
956acfc9a1
feature(DOCKERFILE): remove parent container entrypoint script
2021-01-07 11:07:49 -07:00
Asif Bacchus
2125dcb939
fix(DOCKERFILE): fix user creation, add home directory too
2021-01-07 10:45:40 -07:00
Asif Bacchus
0609c680e0
refactor(NGINX): update letsencrypt integration
...
- actually create letsencrypt challenge directory
- point default server-blocks to proper LE directory
- fix access and error logging for LE requests
- update server-block configuration comment headers
2021-01-07 10:16:24 -07:00
Asif Bacchus
4901116443
fix(DOCKERFILE): missing backslash in run cmd
2021-01-07 10:10:35 -07:00
Asif Bacchus
c08d3f1c37
chore(DOCKERFILE): bump internal version number
2021-01-07 10:09:43 -07:00
Asif Bacchus
715ae9cd38
feature(DOCKERFILE): set up nginx to run as non-root
...
- add libcap
- use setcap (via libcap) to allow nginx to bind to ports <1024
- set permissions on nginx directories
- change nginx pid location to /etc/nginx
2021-01-07 10:06:17 -07:00
Asif Bacchus
53ea4c9dc1
revert(DOCKERFILE): remove nano, update internal version
2021-01-07 08:58:08 -07:00
Asif Bacchus
6149fd092e
docs(README): update readme
2021-01-07 08:55:40 -07:00
Asif Bacchus
a5d342afda
docs(README): update readme
2021-01-07 07:29:39 -07:00
Asif Bacchus
609e1d3dd8
fix(NANO): update config option names
2021-01-07 07:22:54 -07:00
Asif Bacchus
394f1fdccd
fix(DOCKERFILE): fix errant reference to old user variable
2021-01-07 07:14:01 -07:00
Asif Bacchus
318e595bbd
refactor(SITES): rename default site block files
...
- remove test from filenames to avoid confusion
- these are production-capable files
2021-01-07 07:11:20 -07:00
Asif Bacchus
23da6ae576
docs(DOCKERFILE): fix username comment
2021-01-07 07:05:20 -07:00
Asif Bacchus
294c31d19e
feature(DOCKERFILE): run as limited user
...
- remove ability to specify username
- hardcode username to www-docker
- run as www-docker
2021-01-07 07:03:57 -07:00
Asif Bacchus
5f07c685ad
feature(DOCKERFILE): add nano, stop using git
...
- add nano and nano configuration file
- download and untar errorpages instead of installing git
2021-01-07 06:59:53 -07:00
Asif Bacchus
cffa79fe25
refactor(NGINX): remove settings from nginx.conf
...
- remove resolver
- remove proxy buffers
- these options should not be hardcoded, prevent conflicts
2021-01-07 05:19:17 -07:00
Asif Bacchus
c4a30f829e
docs(README): update readme
2021-01-06 15:51:15 -07:00
Asif Bacchus
ce95e94092
fix(SCRIPT): disable ssl configs without erroneous err msg
2021-01-06 12:44:40 -07:00
Asif Bacchus
639296a2b1
[README] move directory tree to code block
2021-01-06 08:43:38 -07:00
Asif Bacchus
0991ae7c8a
[README] add directory layout, correct mentions of preconfiguration.
2021-01-06 08:35:51 -07:00
Asif Bacchus
fe0413d5ab
perf(SCRIPT): remove unneeded variable
2021-01-06 04:59:52 -07:00
Asif Bacchus
73d998178c
refactor(SCRIPT): rewrite file update method
2021-01-06 04:52:20 -07:00
Asif Bacchus
f5e553ac21
build(GIT): ignore checksum file
2021-01-06 04:09:22 -07:00
Asif Bacchus
38ec7e96dd
refactor(SCRIPT): change update server path
2021-01-06 04:04:15 -07:00
Asif Bacchus
a9f0387e12
feature(SCRIPT): basic update script
2021-01-06 03:50:34 -07:00
Asif Bacchus
c5ddc0f6e8
fix(SCRIPT): prevent erroneous error message
...
- port update should target secure block file regardless if disabled
2021-01-06 02:48:38 -07:00
Asif Bacchus
e5b2f68fd4
fix(SCRIPT): verify docker installed
2021-01-06 02:35:29 -07:00
Asif Bacchus
942a855ffa
refactor(SCRIPT): rework ssl implementation
...
- restart: prevent unnecessary error messages from already renamed files
2021-01-06 02:31:18 -07:00
Asif Bacchus
1a1df53175
fix(SCRIPT): fix null hostname error
2021-01-06 01:19:37 -07:00
Asif Bacchus
cc2a81070d
fix(SCRIPT): revert quoting vmount var
...
- this variable relies on being globbed
2021-01-06 01:03:14 -07:00
