Jose Diaz-Gonzalez
aa5600271a
fix: include missing config/functions source
...
Closes #3150
2018-04-09 09:37:25 -04:00
Jose Diaz-Gonzalez
f48a6e1834
fix: remove local use in install hook
2018-04-02 00:24:43 -04:00
Alexis Tyler
f054b30086
fix missing function
2018-04-02 00:24:43 -04:00
Alexis Tyler
71bc198cec
inline nginx migrate function
2018-04-02 00:24:43 -04:00
Alexis Tyler
4c3a0801f7
fix review and switch DOKKU_NGINX to DOKKU_PROXY in scripts/docs
2018-04-02 00:24:43 -04:00
Alexis Tyler
7095eac052
migrate env for NGINX_* to PROXY_*
2018-04-02 00:24:43 -04:00
Jose Diaz-Gonzalez
2271badaf5
feat: add support for rhel
...
The centos rpm packages should be installable on centos once this is merged and released. However, Dokku will not maintain an Rhel-specific repository as there is no way for us to feasibly test it.
Closes #3046
2018-02-19 14:31:17 -05:00
Jose Diaz-Gonzalez
70cee2df86
fix: persist users in the dokku group through installations
...
Closes #2908
2017-12-13 01:24:39 -05:00
Lasse Brandt
84a6c6017d
Build a custom dhparam file once for nginx and include it as default
2017-11-14 12:55:52 +01:00
Jose Diaz-Gonzalez
e719da300f
Merge pull request #2642 from chiedo/error-pages
...
Added better default nginx error pages
2017-04-22 20:27:41 -06:00
Jose Diaz-Gonzalez
18957dcf39
Merge pull request #2678 from callahad/modern-tls
...
Update the default cipher suite
2017-04-22 14:42:19 -06:00
Jose Diaz-Gonzalez
9e021f889f
fix: disable ssl tickets
...
This makes Perfect Forward Secrecy useless.
2017-04-20 20:17:43 -06:00
Jose Diaz-Gonzalez
1c5896c3e3
fix: be pci compliant by default
...
Developers can override this in a custom nginx.conf.sigil.
While it may be backwards incompatible - and will therefore require a minor release - it does make things much more secure.
2017-04-20 20:15:38 -06:00
Jose Diaz-Gonzalez
3fab901097
fix: drop duplicate config values
...
[ci skip]
2017-04-20 20:13:44 -06:00
Jose Diaz-Gonzalez
5101096518
fix: ensure nginx conf.d directory exists when running nginx install hook
...
Closes #2686
2017-04-10 00:37:23 -06:00
Dan Callahan
071e746c45
Update the default cipher suite
...
This is the Modern preset from:
https://mozilla.github.io/server-side-tls/ssl-config-generator/
2017-03-23 15:11:57 -05:00
Chiedo
58c2ad8e4b
Attempt to fix plugin path
2017-03-07 16:10:46 -05:00
Chiedo
4c354bdcd6
lol
2017-03-07 15:53:16 -05:00
Chiedo
22f670d999
Fixed variable syntax in install script
2017-03-07 14:50:14 -05:00
Chiedo
e5f3dcaaef
Quoted Variable usage
2017-03-07 14:38:19 -05:00
Chiedo
3f4b1e69c7
Requested improvements
...
- Moved the template files
- Replaced . with $PWD
- Made more descriptive errors in the templates
2017-03-07 14:28:38 -05:00
Chiedo
fa286caca2
Switched to templated error pages
2017-03-07 09:14:24 -05:00
Edgars Beigarts
0004dd53e1
Initial support for CentOS 7
2016-09-26 01:55:20 +03:00
Jose Diaz-Gonzalez
a833688355
Allow users to override their server_names_hash_bucket_size
2016-05-18 14:45:11 -04:00
Michael Hobbs
78d2b3e7d2
attempt to bypass inconsistencies in nginx start behavior. closes #2197
2016-05-16 13:29:16 -07:00
Michael Hobbs
c739c770f7
remove references to global TLS certs. closes #2057
2016-03-31 07:52:19 -07:00
Morris Jobke
7a9cf8abb1
Adds support for ArchLinux as host OS
...
* fix rsyslog handling
* don't hardcode dokku path
* add documentation for ArchLinux package build
* add vagrant machine to run the ArchLinux specific steps
* add step in release process for ArchLinux
* enhance docs for easy ArchLinux steps
2016-02-24 00:02:06 +01:00
Michael Hobbs
0853850f7a
revert dokku group changes and add dokku user to adm group. closes #1572
2015-11-10 09:21:09 -08:00
Mirko Geissler
f85775b870
Only return users of group 'adm'
...
This fixes the issue where all groups starting with 'adm' are returned which broke the installation.
2015-11-05 11:51:29 +01:00
Jose Diaz-Gonzalez
18d6e1be3b
Add special case commands for instances where we are running dokku in debian
...
Refs #976
2015-10-24 23:12:38 -04:00
Michael Hobbs
0a9db4174b
patch broken nginx 1.8.0 logrotate script. closes #1578
2015-10-21 17:21:04 -07:00
Michael Hobbs
f9e636ddb1
make sure dokku can read nginx logs and don't remove other perms. closes #1572
2015-10-20 16:07:42 -07:00
Jakob Krigovsky
c589e8e267
Disable emitting nginx’s version
2015-08-21 19:12:16 +02:00
Jakob Krigovsky
66c7f8f056
Remove ssl_prefer_server_ciphers directive from dokku.conf
...
The default nginx.conf of nginx 1.8.0 already includes this directive.
2015-08-21 19:12:16 +02:00
Jakob Krigovsky
2980731db5
Remove ssl_protocols directive from dokku.conf
...
The default nginx.conf of nginx 1.8.0 already includes this directive.
2015-08-21 19:12:16 +02:00
Jakob Krigovsky
ef6f58a96c
Revert "Force install a default nginx.conf. Closes #799 "
...
This reverts commit 129a5fd33d .
2015-08-21 19:12:16 +02:00
Jose Diaz-Gonzalez
b299f66c28
Validate nginx configuration before reloading nginx. Closes #999
2015-04-21 02:07:27 -04:00
Vincent Fretin
955f95e899
enable ssl_prefer_server_ciphers
...
Since we create /etc/nginx/nginx.conf we don't have "ssl_prefer_server_ciphers on" option enabled anymore, enable it in dokku.conf
2015-02-03 09:52:18 +01:00
Jose Diaz-Gonzalez
ab7f9f1161
Move server_tokens off to the global nginx conf
2015-01-03 21:41:18 -05:00
Michael Hobbs
606bbda66c
make tests work
2014-12-21 14:51:40 -08:00
Michael Hobbs
e99e2201cb
mv default VHOST creation to core install
2014-12-16 20:25:44 -08:00
Andre Bossard
79788e5690
Please increase the server_names_hash_bucket_size
...
I use Dokku in a private environment with very long hostname.... 64 was always a lot to short.
2014-12-11 09:59:13 +01:00
Jose Diaz-Gonzalez
129a5fd33d
Force install a default nginx.conf. Closes #799
2014-12-08 21:20:54 -05:00
Jonas Svatos
c706344a94
fix missing semicolon in nginx config
2014-11-24 13:22:50 +01:00
Thomas Boerger
14b1743c2a
Added openSUSE support
...
I have done the first steps to get dokku running for other distros like
openSUSE. I have simply replaced the important places within the core
plugins with a check for DOKKU_DISTRO that gets exported by dokku
itself. It just replaces the apt-get and service start/restart/reload
functionality with the openSUSE counterparts.
2014-11-23 11:37:58 +01:00
Stafford Brunk
e94b46cb0c
Add a dependencies hook for plugin dependency management
2014-10-16 01:19:38 -04:00
Jose Diaz-Gonzalez
a67c2c927d
Fix issue where certain hosts will not have add-apt-repository installed due to missing packages
2014-10-04 18:39:31 -04:00
Jose Diaz-Gonzalez
2e5f88b285
Use -qq flag on apt-get to quiet installations of packages
2014-10-04 18:39:28 -04:00
rhy-jot
4f5fc58629
Update cipher list
...
http://blog.cloudflare.com/killing-rc4-the-long-goodbye
2014-05-07 15:10:12 -07:00
Jessica Frazelle
969aed87c6
double brackets
2014-04-15 09:31:08 -04:00