Thomas LEVEIL
8d017504c0
TRAVIS: run debian and alpine tests in parallel
2017-01-07 21:07:34 +01:00
Jason Wilder
31a0a844e3
Merge pull request #558 from matt-hh/alpine
...
Add alpine base image
2017-01-05 18:05:38 -07:00
Jason Wilder
e9a5519fb0
Merge pull request #611 from MichaelSp/patch-1
...
add link to letsencrypt-nginx-proxy-companion
2016-12-30 15:26:40 -07:00
Jason Wilder
a7bc426b61
Merge pull request #666 from matt-hh/feature/upgrade-1.11.8
...
Upgrade to nginx 1.11.8
2016-12-28 18:42:02 -07:00
Matthias Döring
c1d93d112a
Upgrade nginx-alpine to 1.11.8
2016-12-29 00:18:06 +01:00
Matthias Döring
2a8f4554a7
Merge branch 'master' into alpine
...
* master:
Updated nginx to 1.11.6
Travis-CI's apt-get doesn't have --allow-downgrades yet, which is annoying because --force-yes is deprecated
Put --allow-downgrades in the right place
Upgrade docker-engine and allow downgrades
Clarified a couple parts in the README
Comment typo
Added httpoxy test
Updated README to reflect X-Forwarded-Port
Implemented more advanced webserver with routing and request header echoing, added header tests
Honor upstream forwarded port if available
add ssl_session_tickets to default site
Replace "replace" to "trimSuffix"
do not enable HSTS for subdomains
Remove proxy-tier network in favor of the default.
Added X-Forwarded-Port
Add docker-compose file for separate containers.
connect to uWSGI backends
2016-12-29 00:02:05 +01:00
Matthias Döring
004cc3cb8c
Upgrade to nginx 1.11.8
2016-12-28 23:38:47 +01:00
Jason Wilder
6186fbf8b0
Merge pull request #653 from cramaker/feature/nginx-1.11.6
...
Updated nginx to 1.11.6
2016-12-08 12:59:56 -07:00
Cody Ramaker
b66398d1bf
Updated nginx to 1.11.6
2016-12-08 13:24:49 -06:00
Jason Wilder
40872c9b43
Merge pull request #649 from kamermans/travisci_fix
...
Travis-CI - upgrade docker-engine and allow downgrades
2016-12-05 10:10:27 -07:00
Steve Kamerman
59b8806859
Travis-CI's apt-get doesn't have --allow-downgrades yet, which is annoying because --force-yes is deprecated
2016-12-05 09:33:44 -05:00
Steve Kamerman
271729aaaa
Put --allow-downgrades in the right place
2016-12-05 09:29:08 -05:00
Steve Kamerman
dc910107cf
Upgrade docker-engine and allow downgrades
2016-12-05 09:21:39 -05:00
Steve Kamerman
fc7653bf3d
Merge branch 'master' into feature_nohttps
2016-12-05 09:06:39 -05:00
Jason Wilder
e60fefad27
Merge pull request #587 from kamermans/feature_x_forwarded_port
...
Added X-Forwarded-Port and proxy headers tests
2016-12-02 11:17:44 -07:00
Jason Wilder
51aeee9a2c
Merge pull request #619 from max-wilkinson/master
...
Clarified a couple parts in the README
2016-11-27 13:19:34 -07:00
Max Wilkinson
fddae94ed8
Clarified a couple parts in the README
2016-10-28 14:46:37 -04:00
Michael
1a608eaefb
add link to letsencrypt-nginx-proxy-companion
2016-10-22 14:31:57 +02:00
Steve Kamerman
8cf0b75d80
Updated README with HTTPS_METHOD=nohttps
2016-10-01 11:25:11 -04:00
Steve Kamerman
374b1256cd
Add HTTPS_METHOD=https to disable SSL site
2016-10-01 11:22:48 -04:00
Steve Kamerman
9ef0bb3356
Comment typo
2016-09-29 16:06:53 -04:00
Steve Kamerman
b9bf183df2
Added httpoxy test
2016-09-29 15:43:07 -04:00
Steve Kamerman
7422539f20
Updated README to reflect X-Forwarded-Port
2016-09-29 15:42:49 -04:00
Steve Kamerman
112aad39b6
Implemented more advanced webserver with routing and request header echoing, added header tests
2016-09-29 15:36:01 -04:00
Steve Kamerman
124b8cd757
Honor upstream forwarded port if available
2016-09-29 11:33:21 -04:00
Steve Kamerman
6ebbdb10c7
Merge branch 'master' into feature_x_forwarded_port
2016-09-29 11:26:51 -04:00
Jason Wilder
0670a13d92
Merge pull request #581 from chulkilee/ssl_session_tickets
...
add ssl_session_tickets to default site
2016-09-24 20:22:16 -06:00
Chulki Lee
4661bf4dd9
add ssl_session_tickets to default site
...
Fixes #580
2016-09-23 21:58:09 -07:00
Jason Wilder
760936d9ea
Merge pull request #572 from pvlg/patch-2
...
Replace "replace" to "trimSuffix"
2016-09-17 09:58:27 -06:00
pvlg
fe9a538ec8
Replace "replace" to "trimSuffix"
...
I have a domain key-mydomain.com. When I add domain www.key-mydomain.com with ssl cert I did not get the desired result. Function replace cut name ssl cert "www.key-mydomain.com.key" to "www-mydomain.com".
2016-09-17 16:53:01 +03:00
Jason Wilder
f02bc98a6e
Merge pull request #566 from mplx/patch/hsts-no-subdomains
...
do not enable HSTS for subdomains
2016-09-13 09:18:27 -06:00
mplx
37323320c8
do not enable HSTS for subdomains
2016-09-12 09:46:59 +02:00
Jason Wilder
40d433ae80
Merge pull request #493 from ryneeverett/docker_compose_separate_containers
...
Add docker-compose file for separate containers.
2016-09-09 14:18:06 -06:00
Jason Wilder
ec7169c112
Merge pull request #323 from pabra/master
...
connect to uWSGI backends
2016-09-09 14:16:08 -06:00
Matthias Döring
7d05f0d924
Add nginx alpine to update-dependencies task
2016-09-03 12:05:27 +02:00
Matthias Döring
ba55d1a0b6
Add alpine base image
...
- Inspired by #408
- Possible solution for #543
2016-09-02 17:11:36 +02:00
Jason Wilder
e95d3e9fdf
Merge pull request #555 from freakinruben/patch-1
...
Update ciphers and HTST settings to get A+ rating
2016-09-01 09:21:56 -06:00
Ruben
87879c1ee2
Update ciphers and HTST settings to get A+ rating
...
The default config gets you an 'A' rating. Cipher settings are copied from [Mozilla SSL Configartion Generator](https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=nginx-1.10.1&openssl=1.0.1t&hsts=yes&profile=intermediate )
2016-09-01 11:34:56 +02:00
Jason Wilder
579bc1bf6e
Merge pull request #518 from huiwang/nginx_upgrade
...
upgrade nginx to 1.11.3
2016-08-25 20:55:54 -06:00
hwang
176b78943e
upgrade nginx to 1.11.3 in makefile
2016-08-25 21:46:57 +02:00
Jason Wilder
a6287d7df1
Merge pull request #545 from auchri/patch-1
...
Update .travis.yml
2016-08-25 12:30:16 -06:00
Christoph
c113e7ac82
Update .travis.yml
2016-08-25 20:22:35 +02:00
hwang
03e863d838
upgrade nginx to 1.11.3
2016-08-25 20:16:37 +02:00
ryneeverett
478ad17adb
Remove proxy-tier network in favor of the default.
...
As @huiwang pointed out, using a custom network is unnecessary since the
default bridge network works just as well.
2016-07-29 17:23:10 -04:00
hwang
86c408bbdd
upgrade nginx to 1.11.0
2016-07-29 21:17:14 +02:00
Steve Kamerman
2e29168d92
Added X-Forwarded-Port
2016-07-21 11:23:35 -04:00
Jason Wilder
30128cfda0
Merge pull request #511 from kamermans/master
...
Mitigate httpoxy attack by suppressing `Proxy` request header
2016-07-19 12:15:35 -06:00
Steve Kamerman
fd127517b9
Added comments about httpoxy
2016-07-19 11:03:41 -04:00
Steve Kamerman
357d58ad97
Mitigate httpoxy attack (httpoxy.org, CVE-2016-(5385-5388,1000109-1000110)
2016-07-18 13:34:37 -04:00
ryneeverett
5f684d4fc5
Add docker-compose file for separate containers.
...
Demonstrate that this pattern works.
This is based on the example at
<https://github.com/fatk/docker-letsencrypt-nginx-proxy-companion-examples/blob/master/docker-compose/v2/simple-site/docker-compose.yml >.
2016-07-13 17:31:53 -04:00