80 commits

Author	SHA1	Message	Date
Franzi	48cc865892	bundles/nginx: make sure webroot directory exists	2020-10-18 18:55:00 +02:00
Franzi	366374b4e5	bundles/apt: handle unattended-upgrades ourselves	2020-10-18 15:33:41 +02:00
Franzi	7ea85247e0	bundles/nginx: proxy is a dict now, add some more configuration options	2020-09-22 18:39:38 +02:00
Franzi	151d8e92c3	bundles/nginx: do not set X-Forwarded-Proto if https is disabled, do not use http2 without ssl	2020-09-20 15:46:39 +02:00
Franzi	d6799088c4	bundles/nginx: add metadata option to disable https	2020-09-20 14:36:43 +02:00
Franzi	ccd4a09183	bundles/apt: allow variables {os} and {os_release} in sources.list entries	2020-08-30 12:06:19 +02:00
Franzi	77051c0a0e	bundles/nginx: clean up unmanaged nginx vhosts	2020-08-30 11:36:48 +02:00
Franzi	b24253a64b	bundles/nginx: determine worker processes by cpu count by default	2020-08-30 10:32:29 +02:00
Franzi	ad620396f5	bundles/apt: rework gpg key handling	2020-08-20 10:59:45 +02:00
Franzi	8547948ce6	bundles/nginx: also set host header for proxy connections	2020-08-19 21:43:37 +02:00
Franzi	5e2fea8497	update to bw4	2020-08-18 15:31:52 +02:00
Franzi	d7862918a6	bundles/nginx: set default X-Frame-Options to SAMEORIGIN	2020-08-18 15:07:43 +02:00
Franzi	17828a29f8	bundles/nginx: fix hsts header	2020-08-14 08:23:41 +02:00
Franzi	7986f6ee7d	bundles/letsencrypt: remove ocsp stapling ... This causes problems with weechat and dovecot. Those certificates are short-lived, so not having OCSP stapling is probably fine.	2020-07-26 18:48:37 +02:00
Franzi	f7eb0cc150	bundles/{letsencrypt,nginx}: fix ocsp stapling	2020-07-19 12:10:19 +02:00
Franzi	de632a7725	htz.ex42-1048908: add missing domains	2020-07-19 11:26:12 +02:00
Franzi	94c2c644a6	bundles/nginx: support PHP 7.3	2020-07-19 11:09:53 +02:00
Franzi	31a1a88d13	bundles/nginx: use DEFAULTS for letsencrypt	2020-07-19 10:58:54 +02:00
Franzi	d1236d6e25	bundles/nginx: add stub_status	2020-06-01 13:35:54 +02:00
Franzi	5f804ca3be	bundles/letsencrypt: add metadata to reload certificates and services	2020-06-01 12:33:25 +02:00
Franzi	85b3adf671	add proxy feature to nginx	2020-06-01 11:31:13 +02:00
Franzi	3523edbcb4	bundles/nginx: ensure we're doing letsencrypt, since we're enforcing ssl	2020-06-01 11:17:52 +02:00
Franzi	36c8b90c4b	bundles/nginx: switch to TLS 1.2 and 1.3 only	2020-06-01 11:01:00 +02:00
Franzi	c4330f866b	bundles/nginx: add deployment of vhost configs	2020-06-01 10:52:52 +02:00
Franzi	dc9e8dc679	add letsencrypt bundle	2020-06-01 10:26:37 +02:00
Franzi	86d88a4355	fix apt unattended-upgrades	2020-05-23 17:01:30 +02:00
Franzi	ffb962b108	bundles/nginx: add nginx config	2020-04-13 09:52:26 +02:00
Franzi	f1a693d0d6	bundles: only install apt packages via apt bundle to avoid double defining packages	2020-04-11 11:25:24 +02:00
Franzi	a1e05108c1	bundles/apt: change origins to sites	2020-04-04 11:21:30 +02:00
Franzi	9556e423bd	bundles/nginx: initial commit	2020-03-14 09:56:19 +00:00