Commit graph

115 commits

Author SHA1 Message Date
Julian Rother
cd5d0b8232
Merge remote-tracking branch 'notandy/master' 2024-03-12 00:57:31 +01:00
nd
4a43d63aea Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible/roles/nginx 2024-03-08 13:54:54 +01:00
nd
1bc80fa9ea Move certificate generation to after the nginx package is installed
This prevents a problem where the certificate role tries to restart a not yet installed nginx
2024-03-08 13:50:45 +01:00
nd
ca850c7602 add mjs to mime table 2024-02-19 19:09:19 +01:00
nd
4b1ac020d6 add redis support to php 2024-02-19 19:09:09 +01:00
nd
63e5f1e570 add bz2 php module 2024-02-19 18:12:07 +01:00
nd
7db1a16b29
Merge branch 'master' of git.cccv.de:infra/ansible/roles/nginx into HEAD 2023-10-29 12:17:40 +01:00
Julian Rother
33dfca7732
Add PHP version for Debian Bookworm 2023-10-28 21:11:39 +02:00
nd
0e7301a1dc rename filters 2023-10-25 16:25:05 +02:00
psy
4d9ae8923c
fix whitespace 2023-09-26 20:11:02 +02:00
nd
7ece9389bc add bookworm support 2023-09-01 23:49:48 +02:00
nd
f18e26456c Merge branch 'master' of https://git.cccv.de/infra/ansible/roles/nginx 2023-09-01 23:48:25 +02:00
psy
48bfecda7e
add proxy_cache_key 2023-07-16 21:02:17 +02:00
psy
2771c35518
set default inactive time to 60 minutes 2023-07-16 20:42:28 +02:00
psy
040a5e8f58
add cache config 2023-07-16 17:16:58 +02:00
psy
daef88d92f
update readme 2023-06-12 21:47:20 +02:00
psy
128fbc8258
add caching feature 2023-06-12 21:45:23 +02:00
psy
d641af6347
log to syslog by default 2022-12-30 12:32:50 +01:00
Julian Rother
f69308332a
Add SVG support for php-imagick 2022-12-16 02:09:38 +01:00
Julian Rother
6c057142a2
Add nginx.php.fpm_process_count option 2022-12-04 01:08:43 +01:00
Julian Rother
7e86de7eea
Add session_gc_maxlifetime php.ini option 2022-12-04 00:25:08 +01:00
nd
70cd552c1c Merge branch 'master' of https://git.cccv.de/infra/ansible/roles/nginx 2022-11-26 12:35:59 +01:00
Julian Rother
5a3a51e1be
Add force_forwarded_ssl_header vhost/location option
This is a workaround for running an application behind two layers of reverse
proxies with the outer one terminating ssl. In this case the inner proxy
receives requests with plain http and sets X-Forwarded-Proto, X-Forwarded-Ssl
and X-Url-Scheme to "http", although the original requests used https. This
breaks some applications.

Ideally we would use a mechanism similar to real_ip_from and just forward the
proto/ssl/scheme headers if the request came from a trusted proxy, but this
workaround is much simpler.
2022-11-17 19:57:28 +01:00
Julian Rother
1a90bb657a
Add date_timezone php.ini option 2022-08-03 22:33:40 +02:00
nd
bc869aff49 auto restart nginx on letsencrypt renew 2022-07-08 02:43:08 +02:00
nd
1122b72876 fix readme 2022-06-14 01:59:14 +02:00
psy
3ef51e3be1 Merge branch 'feature/disallow_dotfiles' into 'master'
disallow access to dotfiles besides .well-known by default

Closes infra/documentation#115

See merge request infra/ansible/roles/nginx!2
2022-03-19 10:32:12 +00:00
psy
81f7b5337c disallow access to dotfiles besides .well-known by default 2022-03-19 10:32:12 +00:00
nd
8fd7a20a7c
fix logrotate 2021-12-26 03:23:06 +01:00
nd
3a52a1156f
add support to overwrite host header if only a location has a backend 2021-12-24 18:42:48 +01:00
nd
5b201a05cf
add support for fancyindex 2021-12-04 01:40:24 +01:00
nd
97bb7a433f
disable extended geoip logging 2021-12-02 20:58:54 +01:00
nd
eb2e8df0ae
speed up certificate handling 2021-12-02 18:09:05 +01:00
nd
e71de82cdf
add promtail and geoip support 2021-11-26 03:33:55 +01:00
nd
08c567f7af
add more options to stream proxying 2021-11-13 20:30:42 +01:00
nd
e26ef3022e
pass remote_user and schema onto fastcgi 2021-11-06 22:27:18 +01:00
nd
e6a42e31a4
Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible/roles/nginx 2021-10-23 17:06:44 +02:00
nd
bd9f1f0f2c
remove php-smb package 2021-10-14 19:40:09 +02:00
nd
f5b437785d
disable proxy buffering and add larger header buffer 2021-10-07 23:52:59 +02:00
nd
1b81731a4b
add config option for real-ip header 2021-09-04 23:54:05 +02:00
nd
2032a428a4
Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible/roles/nginx 2021-09-04 22:46:26 +02:00
nd
41841311e6
add support for generic streams 2021-09-04 22:44:41 +02:00
nd
1b8b91d980
Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible/roles/nginx 2021-09-01 02:01:35 +02:00
nd
4d82b39ef9
improve log format 2021-09-01 02:00:18 +02:00
nd
bf8dcade56
Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible/roles/nginx 2021-08-26 00:09:54 +02:00
nd
fd0e8d3d28
fix vhost template if the vhost doesn't have a backend 2021-08-20 12:14:03 +02:00
nd
19528852d8
Revert "fix vhost template if the vhost doesn't have a backend"
This reverts commit 87e7cacfd9.
2021-08-20 11:56:00 +02:00
nd
87e7cacfd9
fix vhost template if the vhost doesn't have a backend 2021-08-20 11:43:04 +02:00
nd
fc5a1f4b2d
add support to set location backends 2021-08-15 02:14:55 +02:00
nd
13cb31da67
Merge branch 'master' of ssh://git-ssh.notandy.de:2222/ansible/roles/nginx 2021-07-24 22:56:29 +02:00