56 commits

Author	SHA1	Message	Date
Franziska Kunsmann	b52a196c73	bundles/nginx: add configuration option for client_max_body_size	2021-03-30 21:26:25 +02:00
Franziska Kunsmann	b943d2d465	rework iptables configuration	2021-03-21 10:30:04 +01:00
Franziska Kunsmann	b470fddc12	bundles/nginx: add gdpr-compatible log format	2021-02-20 21:11:12 +01:00
Franziska Kunsmann	74d81eb7ba	bundles/nginx: support disabling ssl for each vhost individually	2021-02-20 14:25:27 +01:00
Franziska Kunsmann	228786f6aa	bundles/letsencrypt: generate a dummy certificate, if no certificate already exists	2021-02-20 13:52:40 +01:00
Franziska Kunsmann	b06532241b	bundles: use metastack syntax for metadata.get()	2021-02-18 18:12:25 +01:00
Franziska Kunsmann	fbb8840dff	add .editorconfig, format files correctly	2021-02-17 10:56:18 +01:00
Franziska Kunsmann	5c1eba0d58	bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()	2021-02-15 14:16:35 +01:00
Franziska Kunsmann	f52df58517	bundles: code style improvements	2021-02-12 20:45:41 +01:00
Franziska Kunsmann	2aaf7cf8f8	bundles/nginx: better ssl	2021-01-24 18:44:13 +01:00
Franziska Kunsmann	2d42e5f7dd	update bw to 4.3, add .provides() to metadata reactors	2021-01-07 18:44:38 +01:00
Franziska Kunsmann	03d3ab6e9d	bundles/{netdata,nginx,unbound}: fix iptables rules (should also create ip6tables rules)	2021-01-02 16:19:55 +01:00
Franziska Kunsmann	6045debe9e	bundles/nginx: check ssl certificates	2020-12-18 13:28:08 +01:00
Franziska Kunsmann	4a57926577	bundles/icinga2: set some notification options for checks	2020-11-22 08:24:44 +01:00
Franziska Kunsmann	5419bf31fb	bundles: fix some icinga checks	2020-11-21 10:30:05 +01:00
Franziska Kunsmann	2d856a1e9a	bundles/nginx: add iptables rules	2020-11-16 16:43:57 +01:00
Franziska Kunsmann	df63f8c732	bundles/nginx: make sure /var/www exists	2020-11-13 13:35:02 +01:00
Franziska Kunsmann	0749fc75c5	bundles: add backup paths	2020-11-13 12:37:26 +01:00
Franziska Kunsmann	e5c12f0628	bundles/nginx: create webroot directories after bundle:zfs is done	2020-11-12 22:59:46 +01:00
Franziska Kunsmann	11701a67c8	dns: deploy MTA-STS	2020-11-11 11:41:06 +01:00
Franziska Kunsmann	8cb997133a	bundles/nginx: add monitoring	2020-11-10 10:57:04 +01:00
Franziska Kunsmann	f8bc4b2ad9	bundles/php: introduce	2020-10-31 13:00:38 +01:00
Franziska Kunsmann	e2d8923dee	bundles/nginx: use metadata reactor to determine index files	2020-10-31 10:41:48 +01:00
Franziska Kunsmann	67c5c23194	bundles/nginx: support non-domain vhost names	2020-10-31 10:30:07 +01:00
Franziska Kunsmann	113221a9b2	bundles/nginx: make sure we have dhparam.pem	2020-10-31 10:18:40 +01:00
Franziska Kunsmann	8eeaabf615	bundles/nginx: use http 308 for https redirect ... basically "go away. nothing's here. use https forever."	2020-10-30 15:24:24 +01:00
Franziska Kunsmann	48cc865892	bundles/nginx: make sure webroot directory exists	2020-10-18 18:55:00 +02:00
Franziska Kunsmann	366374b4e5	bundles/apt: handle unattended-upgrades ourselves	2020-10-18 15:33:41 +02:00
Franziska Kunsmann	7ea85247e0	bundles/nginx: proxy is a dict now, add some more configuration options	2020-09-22 18:39:38 +02:00
Franziska Kunsmann	151d8e92c3	bundles/nginx: do not set X-Forwarded-Proto if https is disabled, do not use http2 without ssl	2020-09-20 15:46:39 +02:00
Franziska Kunsmann	d6799088c4	bundles/nginx: add metadata option to disable https	2020-09-20 14:36:43 +02:00
Franziska Kunsmann	ccd4a09183	bundles/apt: allow variables {os} and {os_release} in sources.list entries	2020-08-30 12:06:19 +02:00
Franziska Kunsmann	77051c0a0e	bundles/nginx: clean up unmanaged nginx vhosts	2020-08-30 11:36:48 +02:00
Franziska Kunsmann	b24253a64b	bundles/nginx: determine worker processes by cpu count by default	2020-08-30 10:32:29 +02:00
Franziska Kunsmann	ad620396f5	bundles/apt: rework gpg key handling	2020-08-20 10:59:45 +02:00
Franziska Kunsmann	8547948ce6	bundles/nginx: also set host header for proxy connections	2020-08-19 21:43:37 +02:00
Franziska Kunsmann	5e2fea8497	update to bw4	2020-08-18 15:31:52 +02:00
Franziska Kunsmann	d7862918a6	bundles/nginx: set default X-Frame-Options to SAMEORIGIN	2020-08-18 15:07:43 +02:00
Franziska Kunsmann	17828a29f8	bundles/nginx: fix hsts header	2020-08-14 08:23:41 +02:00
Franziska Kunsmann	7986f6ee7d	bundles/letsencrypt: remove ocsp stapling ... This causes problems with weechat and dovecot. Those certificates are short-lived, so not having OCSP stapling is probably fine.	2020-07-26 18:48:37 +02:00
Franziska Kunsmann	f7eb0cc150	bundles/{letsencrypt,nginx}: fix ocsp stapling	2020-07-19 12:10:19 +02:00
Franziska Kunsmann	de632a7725	htz.ex42-1048908: add missing domains	2020-07-19 11:26:12 +02:00
Franziska Kunsmann	94c2c644a6	bundles/nginx: support PHP 7.3	2020-07-19 11:09:53 +02:00
Franziska Kunsmann	31a1a88d13	bundles/nginx: use DEFAULTS for letsencrypt	2020-07-19 10:58:54 +02:00
Franziska Kunsmann	d1236d6e25	bundles/nginx: add stub_status	2020-06-01 13:35:54 +02:00
Franziska Kunsmann	5f804ca3be	bundles/letsencrypt: add metadata to reload certificates and services	2020-06-01 12:33:25 +02:00
Franziska Kunsmann	85b3adf671	add proxy feature to nginx	2020-06-01 11:31:13 +02:00
Franziska Kunsmann	3523edbcb4	bundles/nginx: ensure we're doing letsencrypt, since we're enforcing ssl	2020-06-01 11:17:52 +02:00
Franziska Kunsmann	36c8b90c4b	bundles/nginx: switch to TLS 1.2 and 1.3 only	2020-06-01 11:01:00 +02:00
Franziska Kunsmann	c4330f866b	bundles/nginx: add deployment of vhost configs	2020-06-01 10:52:52 +02:00