Jose Diaz-Gonzalez
73e7ff7b18
feat: Enable HSTS by default
...
This enables the HSTS header by default when an SSL certificate is in use. HSTS options can also be managed via the nginx:set command, which also exposes the ability to disable HSTS for your application.
2020-02-06 11:08:13 -05:00
lalyos
bb176e4130
feat: add global fallback for DOKKU_PROXY_PORT and DOKKU_PROXY_SSL_PORT
2020-02-03 13:22:09 -05:00
Jose Diaz-Gonzalez
6b431378a1
feat: add ability to set the ipv4/ipv6 bind address for an app
...
This allows users to handle mulitple interfaces separately or even ensure applications remain accessible only on a local network.
Closes #3805
2019-12-21 18:54:54 -05:00
Kazuhiro NISHIYAMA
2a747138af
Fix typo in desc of is_tls13_available
...
[ci skip]
2019-10-31 17:08:56 +09:00
Jose Diaz-Gonzalez
9dae004651
fix: require nginx 1.13+ in order to enable tls1.3
...
Closes #3711
2019-10-14 11:47:43 -04:00
Jose Diaz-Gonzalez
844b86840a
Merge branch 'upcoming' of github.com:dokku/dokku into upcoming
2019-10-07 18:55:29 -05:00
Jose Diaz-Gonzalez
4d1beedd05
fix: do not create nginx.conf if the image for the app does not exist
2019-10-07 12:18:54 -04:00
Jose Diaz-Gonzalez
903d7ce614
chore: silence trigger logging
...
Logging that a trigger is about to be performed is a bit... extra. If folks want to know that a trigger is running, they can check the event logs.
2019-09-17 23:47:30 -04:00
Jose Diaz-Gonzalez
6e3fddb544
feat: add proper openresty support
...
This change allows supporting the openresty package as installed on Ubuntu 18.04 from the official openresty package repository, while also returning general nginx support.
Closes #3675
2019-09-16 03:05:35 -04:00
fzerorubigd
c4838b4af9
add test for grpc on a port other than 80
...
fix docs a bout supporting only HTTP
remove extra spaces
2019-08-24 10:58:34 +02:00
fzerorubigd
377166d822
nginx-vhost: add support for grpc/grpcs port forward
2019-08-22 21:57:21 +02:00
Jose Diaz-Gonzalez
3ca6245b00
fix: use 6 X to support running under busybox
...
mktemp from busybox requires that all templates end with XXXXXX.
2019-08-12 18:16:16 -04:00
Jose Diaz-Gonzalez
925c6c4c28
feat: inject the dokku PID into temporary files/directories
...
This will allow background processes to cleanup these files if they were unable to be cleaned up during a run of the dokku binary, as is the case for files copied by the docker binary when running in docker.
2019-08-12 17:56:17 -04:00
Jose Diaz-Gonzalez
d326c17dfb
chore: standardize on writing to file versus a destination
2019-08-05 11:40:53 -04:00
Jose Diaz-Gonzalez
1b92f4a97e
chore: standardize how temporary files are named
2019-05-20 18:01:17 -07:00
Jose Diaz-Gonzalez
da4361583b
fix: reverse quotes for variable expansion
...
Without reversing quotes, the variables are sometimes improperly expanded, resulting in files not being removed.
2019-05-20 17:56:50 -07:00
Jose Diaz-Gonzalez
ef5a45c7cb
feat: add DOKKU_QUIET_OUTPUT=1 to all config_set/config_unset calls
...
This makes build output a bit more digestable.
2019-03-13 02:05:18 -04:00
Jose Diaz-Gonzalez
67ae374e60
lint: remove whitespaces before redirect
2019-02-02 13:49:24 -05:00
Jose Diaz-Gonzalez
86795ddacc
tests: run mvdan/shfmt on test runs
...
While I do not agree with _every_ style change, this will force Dokku to have consistent formatting across all shell scripts, which is arguably a Good Thing™.
The command used to reprocess everything is:
```shell
shfmt -l -bn -ci -i 2 -w .
```
2019-01-07 01:25:55 -05:00
Jose Diaz-Gonzalez
287a3c3542
Merge pull request #3350 from dokku/3262-check-web-listeners
...
Do not build the proxy config when there are no app listeners
2019-01-05 06:30:14 -05:00
Jose Diaz-Gonzalez
0909052816
feat: Pull invalid nginx configuration when the nginx configs fail to validate
...
- expose an nginx:validate command that can be used to show validation information
- properly reference the invalid nginx config, rather than tell the user that another app's nginx config is invalid when deploying their own app
- allow a user to cleanup bad nginx config files out of band when they are blocking a deploy _without_ requiring knowing where that nginx config is
Note that this may have issues with generated nginx.conf files that depend on other apps or other parts of the nginx config. For now, this is acceptable, though it is something that needs to be field tested.
Closes #3162
2018-12-31 11:57:03 -05:00
Jose Diaz-Gonzalez
bccfa8a3a0
fix: do not build the proxy config when there are no app listeners
...
This avoids cases where a developer believes they should be able to provision an nginx proxy but is unable to as no web process is configured to listen for the app.
Also silence stderr when extracting custom nginx templates. If there is stderr, that means we were not able to retrieve the template, but it's of no consequence for debugging.
Closes #3262
2018-12-30 05:11:36 -05:00
malixsys
5da8bcc3b5
Adding support for http2_push_preload to nginx 1.13.9+ configuration
2018-05-01 12:58:16 -04:00
Alexis Tyler
61f1060c69
fix old env being passed
2018-04-02 00:24:43 -04:00
Alexis Tyler
71bc198cec
inline nginx migrate function
2018-04-02 00:24:43 -04:00
Alexis Tyler
dc0404dbf1
add better logging to nginx migrate and fix indentation
2018-04-02 00:24:43 -04:00
Alexis Tyler
d3c9e80fcb
deprecate usage of NGINX_* in custom config
2018-04-02 00:24:43 -04:00
Alexis Tyler
85a7956876
add last PROXY conversions
2018-04-02 00:24:43 -04:00
Alexis Tyler
4c3a0801f7
fix review and switch DOKKU_NGINX to DOKKU_PROXY in scripts/docs
2018-04-02 00:24:43 -04:00
Alexis Tyler
7095eac052
migrate env for NGINX_* to PROXY_*
2018-04-02 00:24:43 -04:00
Jose Diaz-Gonzalez
2271badaf5
feat: add support for rhel
...
The centos rpm packages should be installable on centos once this is merged and released. However, Dokku will not maintain an Rhel-specific repository as there is no way for us to feasibly test it.
Closes #3046
2018-02-19 14:31:17 -05:00
Jose Diaz-Gonzalez
5e82b37147
Merge branch 'master' into feature-config-golang
2017-10-04 19:04:31 -04:00
Jose Diaz-Gonzalez
af13d1247f
refactor: consolidate DOKKU_DISABLE_PROXY usage into the proxy plugin
2017-10-02 15:05:13 -07:00
Jose Diaz-Gonzalez
9ef7c385d4
refactor: drop extra sub-shell
2017-10-02 15:05:13 -07:00
Jose Diaz-Gonzalez
44282fd857
fix: Declare and assign separately to avoid masking return values.
2017-10-02 15:05:13 -07:00
Jose Diaz-Gonzalez
1e8831d9a0
chore: remove unused nullglob
2017-10-02 15:05:13 -07:00
Jose Diaz-Gonzalez
d7d5d373c9
feat: refactor to retrieve listeners from network plugin
2017-10-02 15:05:13 -07:00
Alex Quick
416b499670
[nginx-proxy] remove trailing spaces from PROXY_PORT_MAP
...
this plugin used to rely on the fact that config
supressed trailing spaces
2017-09-27 23:56:39 -04:00
Jose Diaz-Gonzalez
689f0443f3
chore: remove unnecessary dokku_log_fail
...
[ci skip]
2017-09-19 13:53:00 -04:00
Manuel Colmenero
441e864ea1
fix: Declare and assign separately to avoid masking return values
...
Fixes the introduced CI warnings.
2017-09-19 19:14:48 +02:00
Manuel Colmenero
4f17392bf1
fix: Move operator inside the brackets
2017-09-19 08:27:21 +02:00
Manuel Colmenero
deace7a03a
fix: Remove unnecessary nesting
2017-09-19 08:26:55 +02:00
Manuel Colmenero
c49f81cd8b
fix: Check first in $PATH for nginx, use sbin location as backup
2017-09-18 21:19:30 +02:00
Manuel Colmenero
bada02a122
Use double brackets instead of single ones
2017-09-18 21:09:03 +02:00
Manuel Colmenero
3d785360e1
fix: Check the location of nginx in a central way
...
- Now there's only a "single source of truth" for the location of the nginx
binary.
- It is checked if it's there before it's needed.
2017-09-18 20:19:27 +02:00
Chiedo
12b44c865b
Exposed function to nginx template
2017-03-08 07:49:21 -05:00
Jose Diaz-Gonzalez
b4899cdb21
Merge pull request #2620 from dokku/2356-proxy-report
...
Implement domains:report and proxy:report
2017-02-23 19:37:58 -07:00
Jose Diaz-Gonzalez
885aa47b18
refactor: move nginx:help to internal-functions
2017-02-20 22:35:52 -07:00
Jose Diaz-Gonzalez
336ffc9b09
Update functions
2017-02-05 13:39:49 -05:00
Jose Diaz-Gonzalez
aae7401888
fix: always set a default ssl port for apps with ssl enabled
...
Closes #2535
2017-01-30 03:04:02 -05:00