Jose Diaz-Gonzalez
f3e191988d
Merge pull request #3602 from alexymik/master
...
Create a 502 error page to automatically refresh if backend status changes
2019-07-01 17:21:56 -04:00
Alexy Mikhailichenko
c99f92e9f2
Change 500 to 502
2019-07-01 17:17:14 -04:00
Alexy Mikhailichenko
a496ae987a
Remove console calls
2019-07-01 17:10:45 -04:00
Alexy Mikhailichenko
75036dfa27
Remove console calls
2019-07-01 14:24:36 -04:00
Alexy Mikhailichenko
b35235f1e9
Change 502 error page to automatically refresh if backend status changes
2019-07-01 14:14:34 -04:00
JakeAngell
4e4e256a27
Update nginx.conf.sigil
2019-06-17 21:21:10 +01:00
Alessio
cb16cae09b
fix nginx template with Connection header to http_connection
2019-04-22 22:08:28 +01:00
Jose Diaz-Gonzalez
54ef6514d5
fix: turn off error logging for validate config
...
This will allow validation to work if the default logging locations cannot be written to but the configuration is otherwise okay. This will be the case for users with custom nginx configurations that log to other places, such as syslog.
2019-03-26 17:10:32 -04:00
Jose Diaz-Gonzalez
0909052816
feat: Pull invalid nginx configuration when the nginx configs fail to validate
...
- expose an nginx:validate command that can be used to show validation information
- properly reference the invalid nginx config, rather than tell the user that another app's nginx config is invalid when deploying their own app
- allow a user to cleanup bad nginx config files out of band when they are blocking a deploy _without_ requiring knowing where that nginx config is
Note that this may have issues with generated nginx.conf files that depend on other apps or other parts of the nginx config. For now, this is acceptable, though it is something that needs to be field tested.
Closes #3162
2018-12-31 11:57:03 -05:00
Jose Diaz-Gonzalez
136c868904
chore: move http2_push logic into single line
...
[ci skip]
2018-05-19 02:14:37 -04:00
malixsys
5da8bcc3b5
Adding support for http2_push_preload to nginx 1.13.9+ configuration
2018-05-01 12:58:16 -04:00
Alexis Tyler
7095eac052
migrate env for NGINX_* to PROXY_*
2018-04-02 00:24:43 -04:00
Cosmin Stroe
0b2bea3fa9
Use upstream port in nginx.conf template
2017-08-04 12:26:35 -05:00
Cosmin Stroe
9156dea8b7
Revert "Fix upstream ports configuration."
...
This reverts commit 1f93169c43 .
2017-08-04 12:20:35 -05:00
Cosmin Stroe
1f93169c43
Fix upstream ports configuration.
2017-08-04 02:21:31 -05:00
Cosmin Stroe
65990068cb
Revert "Use correct port number for the upstream."
...
This reverts commit 52b45d74cb .
2017-08-04 00:24:12 -05:00
Cosmin Stroe
52b45d74cb
Use correct port number for the upstream.
2017-08-03 22:24:14 -05:00
Jose Diaz-Gonzalez
02aca5aac5
Merge pull request #2739 from dokku/2676-listener-port
...
Use listener_port in nginx.conf.sigil
2017-04-24 09:31:37 -06:00
Jose Diaz-Gonzalez
e719da300f
Merge pull request #2642 from chiedo/error-pages
...
Added better default nginx error pages
2017-04-22 20:27:41 -06:00
Jose Diaz-Gonzalez
a7b929a80e
Update 400-error.html
...
Base it more closely on the rails application error page
2017-04-22 15:44:24 -06:00
Jose Diaz-Gonzalez
c05ceb0aff
Update 500-error.html
2017-04-22 15:42:25 -06:00
Jose Diaz-Gonzalez
4194702442
Update 404-error.html
...
Base it more closely on the rails application error page
2017-04-22 15:42:06 -06:00
Jose Diaz-Gonzalez
04dda5e347
Update 500-error.html
...
Base it more closely on the rails application error page
2017-04-22 15:40:26 -06:00
Jose Diaz-Gonzalez
dea195df26
fix: Use listener_port in nginx.conf.sigil
...
Closes #2676
2017-04-22 15:17:15 -06:00
Jose Diaz-Gonzalez
18957dcf39
Merge pull request #2678 from callahad/modern-tls
...
Update the default cipher suite
2017-04-22 14:42:19 -06:00
Jose Diaz-Gonzalez
4abad29b3a
feat: set prefer_server_ciphers to on by default
...
[ci skip]
2017-04-20 20:14:10 -06:00
Dan Callahan
a939296981
Prefer HTTP2 to SPDY in nginx-vhosts
...
1. SPDY has been deprecated and removed from modern browsers:
http://caniuse.com/#feat=spdy
2. HTTP/2 is present in all modern browsers:
http://caniuse.com/#feat=http2
3. SPDY and HTTP/2 are mutually exclusive in port-based `listen` directives:
http://nginx.org/en/docs/http/ngx_http_core_module.html#listen
Caniuse suggests that 74% of global users have a browser that supports
HTTP/2, while only 27% have a browser that supports SPDY. Only IE11 and
Safari support both.
Therefore, when both are available, Dokku should choose HTTP/2 to
maximize the benefit to users.
2017-03-23 15:23:57 -05:00
Dan Callahan
071e746c45
Update the default cipher suite
...
This is the Modern preset from:
https://mozilla.github.io/server-side-tls/ssl-config-generator/
2017-03-23 15:11:57 -05:00
Chiedo
e5f3dcaaef
Quoted Variable usage
2017-03-07 14:38:19 -05:00
Chiedo
3f4b1e69c7
Requested improvements
...
- Moved the template files
- Replaced . with $PWD
- Made more descriptive errors in the templates
2017-03-07 14:28:38 -05:00
Chiedo
fa286caca2
Switched to templated error pages
2017-03-07 09:14:24 -05:00
Chiedo
3b78e65b2b
Added better default nginx error pages
2017-03-06 15:05:58 -05:00
Jose Diaz-Gonzalez
50b1c9d5c6
Detect nginx versions that support HTTP/2 well
...
Certain versions of nginx have bugs that prevent HTTP/2 from properly responding to all clients, thus causing applications to be unavailable.
Closes #2435
2016-11-21 19:33:50 -07:00
Jose Diaz-Gonzalez
e3463613d4
Guard against poodle vulnerability by default
...
Closes #2339
2016-08-07 21:11:13 -04:00
Michael Hobbs
d9ab4d1424
fix missing $ sign in default nginx template
2016-06-18 16:06:46 -07:00
Michael Hobbs
e6dfdc0732
fix reference to .SPDY_SUPPORTED in default template
2016-06-16 17:23:35 -07:00
Michael Hobbs
ab94a9fc67
fix broken tar/urls tests
2016-06-16 16:04:44 -07:00
Michael Hobbs
6c1d6225f9
initial pass at implementing DOKKU_PROXY_PORT_MAP. closes #2239 .
2016-06-16 16:04:44 -07:00
Jose Diaz-Gonzalez
a43fc39d9a
Support nginx 1.9.5+
...
Newer versions of nginx drop spdy support in favor of http2, and thus the nginx config that we bundle with dokku causes nginx to fail to reload in certain cases. This change drops spdy support in favor of http2 for versions of nginx greater than 1.9.5.
Closes #2216
2016-06-16 17:18:43 -04:00
Michael Hobbs
db94fcb6b4
include non ssl server names in SSL server block. fixes #2086
2016-04-08 13:21:26 -07:00
Tobias Brunner
d01961424d
move include to server section
...
This replicates the behaviour of location.config and makes the
letsencrypt plugin usable again for Dockerfile deployments
2016-03-31 09:43:44 +02:00
Michael Hobbs
9842d7498b
nginx-vhosts rewrite
2016-02-18 18:38:54 -08:00
Michael Hobbs
4dd4d7c567
initial pass at nginx proxy without VHOST. closes #1123
2015-09-17 19:09:38 -07:00
Michael Hobbs
964a84dc31
rename ssl terminated template to conform to naming scheme
2015-09-15 10:36:14 -07:00
Assaf Arkin
1b84527f8c
ADDED Nginx configuration for running behind load balancer
2015-09-15 10:31:27 -07:00
Jose Diaz-Gonzalez
2d6054605e
Remove non-standard redirects
2015-07-03 16:41:17 -04:00
krishna rokhale
62d1d41bc5
removing new lines.
2015-07-03 16:40:23 -04:00
krishna rokhale
adfa13235d
added two more cases to SSL template and gzip as default in templates.
2015-07-03 16:40:23 -04:00
Jose Diaz-Gonzalez
e2e36a5045
Add logging to :80 stanza
2015-06-27 12:24:27 -04:00
Jose Diaz-Gonzalez
6bb513f12c
Split nginx ssl logs by $APP
...
Refs #1158
2015-06-26 11:03:29 -04:00