Julian Rother
7e86de7eea
Add session_gc_maxlifetime php.ini option
2022-12-04 00:25:08 +01:00
Julian Rother
5a3a51e1be
Add force_forwarded_ssl_header vhost/location option
...
This is a workaround for running an application behind two layers of reverse
proxies with the outer one terminating ssl. In this case the inner proxy
receives requests with plain http and sets X-Forwarded-Proto, X-Forwarded-Ssl
and X-Url-Scheme to "http", although the original requests used https. This
breaks some applications.
Ideally we would use a mechanism similar to real_ip_from and just forward the
proto/ssl/scheme headers if the request came from a trusted proxy, but this
workaround is much simpler.
2022-11-17 19:57:28 +01:00
Julian Rother
1a90bb657a
Add date_timezone php.ini option
2022-08-03 22:33:40 +02:00
psy
81f7b5337c
disallow access to dotfiles besides .well-known by default
2022-03-19 10:32:12 +00:00
nd
3a52a1156f
add support to overwrite host header if only a location has a backend
2021-12-24 18:42:48 +01:00
nd
e71de82cdf
add promtail and geoip support
2021-11-26 03:33:55 +01:00
nd
08c567f7af
add more options to stream proxying
2021-11-13 20:30:42 +01:00
nd
f5b437785d
disable proxy buffering and add larger header buffer
2021-10-07 23:52:59 +02:00
nd
1b81731a4b
add config option for real-ip header
2021-09-04 23:54:05 +02:00
nd
2032a428a4
Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible/roles/nginx
2021-09-04 22:46:26 +02:00
nd
41841311e6
add support for generic streams
2021-09-04 22:44:41 +02:00
nd
fd0e8d3d28
fix vhost template if the vhost doesn't have a backend
2021-08-20 12:14:03 +02:00
nd
19528852d8
Revert "fix vhost template if the vhost doesn't have a backend"
...
This reverts commit 87e7cacfd9
2021-08-20 11:56:00 +02:00
nd
87e7cacfd9
fix vhost template if the vhost doesn't have a backend
2021-08-20 11:43:04 +02:00
nd
fc5a1f4b2d
add support to set location backends
2021-08-15 02:14:55 +02:00
nd
13d7194e4f
add support for listen ips
2021-07-11 04:08:39 +02:00
nd
75e21a2e2e
add support to remove proxy headers
2021-01-29 18:58:33 +01:00
nd
c9bd5720e3
add php-pear, set default timezone utc
2021-01-22 22:02:49 +01:00
nd
4d44f889cc
Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible/roles/nginx
2020-12-20 20:48:23 +01:00
nd
63f955a87d
add support for max_fails and fail_timeout for upstreams
2020-12-20 20:45:35 +01:00
Fabian Freyer
fb6e4a91d1
[PATCH] Add support for adding more upstream attributes
2020-10-18 18:42:23 +02:00
nd
70f6e446eb
Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible/roles/nginx
2020-07-28 00:55:42 +02:00
nd
50b85be487
added more disabled functions from php 7.3
2020-07-28 00:54:51 +02:00
nd
b5ed095d35
add support to add headers to proxy
2020-07-05 15:33:49 +02:00
nd
5d65c9c976
added support for custom tls certificates
2020-05-22 21:57:17 +02:00
nd
7183dcfe66
disable http/2 without ssl
2020-05-21 13:56:07 +02:00
nd
a43c036581
enabled http2
2020-05-16 10:31:16 +02:00
nd
b3aa2c6169
add support for custom locations
2020-04-29 18:52:07 +02:00
nd
1ec6fbb1fd
added support for includes and auths, extended docu
2020-04-18 22:29:15 +02:00
nd
be5a9d8b8e
moved ssl_stapling to main config
2020-04-16 22:55:35 +02:00
nd
b926014bdf
add support to add headers to all vhosts
2020-03-04 23:36:53 +01:00
nd
be5b2f4bae
add option to set php memory limit
2020-03-04 13:36:24 +01:00
nd
53a4544ba1
use certificates role instead of letsencrypt role
2019-11-01 20:02:41 +01:00
nd
f79fec1356
moved resolver to nginx dict
2019-09-01 23:35:15 +02:00
nd
6d652e56a9
support php7.3 and buster
2019-07-19 01:34:28 +02:00
nd
773f2339e8
fixed x-forwarded-for
2019-07-14 14:51:19 +02:00
nd
b0fe6bb0ee
added x-forward-ip support
2019-05-21 19:50:39 +02:00
nd
0e8c531d0b
Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible-roles/nginx
2019-04-27 21:47:37 +02:00
nd
9289015473
added support for php ini values and custom vhost config
2019-04-27 21:47:33 +02:00
nd
e017c7aab9
add support for websockets
2019-04-16 13:10:19 +02:00
nd
5846acce89
added option to disable monitoring and pki
2019-04-13 23:32:58 +02:00
nd
6d087a3938
fixed vhost config and ssl trusted certs
2019-03-30 20:39:16 +01:00
nd
6d75684a40
no longer enabling ssl on nossl ports...
2019-03-30 13:42:51 +01:00
nd
ba448f3185
added location support
2019-02-11 02:06:51 +01:00
nd
837e8e0531
changed letsencrypt default
2019-02-11 01:35:26 +01:00
nd
9097dea693
add more proxy headers
2019-02-10 22:14:27 +01:00
nd
d0e8250cbc
merged reverse proxy role, added docu
2019-02-10 21:21:12 +01:00
nd
fb90bb6cad
updated ssl
2018-09-22 19:14:33 +02:00
nd
07d71e6ef9
fixed syntax for multiple dns resolver
2017-12-09 02:26:25 +01:00
nd
06e6de1680
Initial commit
2017-10-07 00:11:35 +02:00
