24 commits

Author	SHA1	Message	Date
psy	999ad37b11	add security.txt	2024-04-21 11:12:36 +02:00
psy	48bfecda7e	add proxy_cache_key	2023-07-16 21:02:17 +02:00
psy	040a5e8f58	add cache config	2023-07-16 17:16:58 +02:00
Julian Rother	5a3a51e1be	Add force_forwarded_ssl_header vhost/location option ... This is a workaround for running an application behind two layers of reverse proxies with the outer one terminating ssl. In this case the inner proxy receives requests with plain http and sets X-Forwarded-Proto, X-Forwarded-Ssl and X-Url-Scheme to "http", although the original requests used https. This breaks some applications. Ideally we would use a mechanism similar to real_ip_from and just forward the proto/ssl/scheme headers if the request came from a trusted proxy, but this workaround is much simpler.	2022-11-17 19:57:28 +01:00
psy	81f7b5337c	disallow access to dotfiles besides .well-known by default	2022-03-19 10:32:12 +00:00
nd	3a52a1156f	add support to overwrite host header if only a location has a backend	2021-12-24 18:42:48 +01:00
nd	f5b437785d	disable proxy buffering and add larger header buffer	2021-10-07 23:52:59 +02:00
nd	fd0e8d3d28	fix vhost template if the vhost doesn't have a backend	2021-08-20 12:14:03 +02:00
nd	19528852d8	Revert "fix vhost template if the vhost doesn't have a backend" ... This reverts commit 87e7cacfd9.	2021-08-20 11:56:00 +02:00
nd	87e7cacfd9	fix vhost template if the vhost doesn't have a backend	2021-08-20 11:43:04 +02:00
nd	fc5a1f4b2d	add support to set location backends	2021-08-15 02:14:55 +02:00
nd	13d7194e4f	add support for listen ips	2021-07-11 04:08:39 +02:00
nd	75e21a2e2e	add support to remove proxy headers	2021-01-29 18:58:33 +01:00
nd	b5ed095d35	add support to add headers to proxy	2020-07-05 15:33:49 +02:00
nd	5d65c9c976	added support for custom tls certificates	2020-05-22 21:57:17 +02:00
nd	7183dcfe66	disable http/2 without ssl	2020-05-21 13:56:07 +02:00
nd	a43c036581	enabled http2	2020-05-16 10:31:16 +02:00
nd	b3aa2c6169	add support for custom locations	2020-04-29 18:52:07 +02:00
nd	1ec6fbb1fd	added support for includes and auths, extended docu	2020-04-18 22:29:15 +02:00
nd	be5a9d8b8e	moved ssl_stapling to main config	2020-04-16 22:55:35 +02:00
nd	b926014bdf	add support to add headers to all vhosts	2020-03-04 23:36:53 +01:00
nd	53a4544ba1	use certificates role instead of letsencrypt role	2019-11-01 20:02:41 +01:00
nd	773f2339e8	fixed x-forwarded-for	2019-07-14 14:51:19 +02:00
nd	b0fe6bb0ee	added x-forward-ip support	2019-05-21 19:50:39 +02:00

Renamed from templates/vhost.j2 (Browse further)