Asif Bacchus
cbb8595380
refactor(NGINX): auto-load certificates
...
- use container-bound certificates by default
- do not use separate certificate loading include
2021-01-08 22:02:22 -07:00
Asif Bacchus
00fcd6dd10
refactor(NGINX): move tmp paths to accessible locations for limited user
2021-01-07 13:31:04 -07:00
Asif Bacchus
715ae9cd38
feature(DOCKERFILE): set up nginx to run as non-root
...
- add libcap
- use setcap (via libcap) to allow nginx to bind to ports <1024
- set permissions on nginx directories
- change nginx pid location to /etc/nginx
2021-01-07 10:06:17 -07:00
Asif Bacchus
cffa79fe25
refactor(NGINX): remove settings from nginx.conf
...
- remove resolver
- remove proxy buffers
- these options should not be hardcoded, prevent conflicts
2021-01-07 05:19:17 -07:00
Asif Bacchus
31bdf7b7f2
fix(CONFIG): change healthcheck port
2021-01-05 17:29:10 -07:00
Asif Bacchus
7cf92e7b2c
feature(NGINX): add health stub site
2021-01-05 17:18:24 -07:00
Asif Bacchus
ccc303f597
refactor(CONFIG): update SSL configurations
2021-01-05 17:12:00 -07:00
Asif Bacchus
096aecfeec
update proxy buffers to resolve access_log msg
2019-11-18 01:11:58 -07:00
Asif Bacchus
935ae0d150
add dedicated user for better permission control
2019-11-11 00:04:15 -07:00
Asif Bacchus
b14fe19ece
increase server names hash bucket size
2019-10-20 00:24:47 -06:00
Asif Bacchus
b83c4680da
increase server names hash bucket size
2019-10-19 23:43:55 -06:00
Asif Bacchus
bfdb85b384
add option to turn on access log
2019-10-18 01:53:20 -06:00
Asif Bacchus
5b89659c0f
append newline to all configuration files
2019-10-18 00:35:02 -06:00
Asif Bacchus
89db7bc771
update container note files
2019-10-18 00:28:59 -06:00
Asif Bacchus
a555ea3bf4
move error pages out of webroot
2019-10-17 23:27:50 -06:00
Asif Bacchus
2a25edcc42
isolate SSL config from user configs
2019-10-17 16:30:35 -06:00
Asif Bacchus
f25d9ae3de
move error pages back to server configs
2019-10-17 01:23:11 -06:00
Asif Bacchus
365ed42971
set fun error pages as global default
2019-10-17 01:06:52 -06:00
Asif Bacchus
19a6f82b54
rename ssl cert location snippet
2019-10-17 00:52:31 -06:00
Asif Bacchus
2d82201fce
set location to fixed within container
2019-10-17 00:44:37 -06:00
Asif Bacchus
af16cee76e
change to proper format for easier sed editing
2019-10-17 00:27:57 -06:00
Asif Bacchus
fd17964781
change HSTS time to 6 months
2019-10-17 00:27:26 -06:00
Asif Bacchus
141b932a1c
initial commit - skeleton setup
2019-10-16 23:44:47 -06:00
