matrix-docker-ansible-deploy

Commit graph

Autor	SHA1	Nachricht	Datum
Slavi Pantaleev	3a9fe48deb	Make matrix-nginx-proxy's X-Forwarded-For header customizable Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1393	vor 4 Jahren
Aaron Raimist	f8fe68b385	Allow workers to serve new v3 APIs `1f196f59cb`	vor 4 Jahren
JokerGermany	c0656448f7	Port 80 for IPv6	vor 4 Jahren
b	6eaa8ac65a	add server_name to matrix-synapsel.conf only if matrix_nginx_proxy_enabled	vor 4 Jahren
Kim Brose	5f6bbafa17	fix space before tab in indent	vor 4 Jahren
HarHarLinks	7b33fc8e19	fixup! auto-generate prometheus.yml for workers metrics	vor 4 Jahren
HarHarLinks	ce41674e61	auto-generate prometheus.yml for workers metrics	vor 4 Jahren
HarHarLinks	4209c4208c	add own variable for worker metrics https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1311#issuecomment-945718866	vor 4 Jahren
HarHarLinks	d9fa2f7ed4	add auto proxy synapse worker metrics when matrix_nginx_proxy_proxy_synapse_metrics is enabled	vor 4 Jahren
Aaron Raimist	a676b5358c	Fix hydrogen OCSP typo From `6f80292745`	vor 4 Jahren
Colin Shea	2578ca4cee	rename matrix_nginx_proxy_x_forwarded_header_value -> matrix_nginx_proxy_x_forwarded_proto_value	vor 4 Jahren
Colin Shea	d0cd67044e	replace $scheme with X-Forwarded-Proto when enabled	vor 4 Jahren
sakkiii	ae6caf158a	Added variable matrix_nginx_proxy_request_timeout (#1265 ) * add timeout param for nginx proxy default value matrix_nginx_proxy_request_timeout is 60s * default matrix_nginx_proxy_request_timeout - 60s * few more variables for request timeout * Update nginx.conf.j2 * Update nginx.conf.j2	vor 4 Jahren
Michael Collins	98e6cd685d	sync with previous repo	vor 4 Jahren
Michael Collins	2e30802b87	use group variables instead	vor 4 Jahren
Michael Collins	8238d65e5f	simplify template conditional	vor 4 Jahren
Michael Collins	bfb61e776e	GMH v0.5.7... maybe!	vor 4 Jahren
JokerGermany	9345d840be	root path for the base domain is wrong (#1189 ) * root path for the base domain * Fix path when running in a container Co-authored-by: Slavi Pantaleev <slavi@devture.com>	vor 4 Jahren
Michael-GMH	86e4649578	GoMatrixHosting v0.5.5	vor 4 Jahren
Michael-GMH	03006eb5ab	GoMatrixHosting v0.5.5	vor 4 Jahren
Slavi Pantaleev	6294e58304	Fix Content-Security-Policy for Element Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1154 According to https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy, having both a header and the `<meta>`-tag provided by Element itself is not a problem. The 2 CSP policies get combined.	vor 4 Jahren
oxmie	5df4d68829	Make federation domain customizable	vor 4 Jahren
sakkiii	0217644b48	Content-Security-Policy For Element Web https://github.com/vector-im/element-web#configuration-best-practices	vor 4 Jahren
Michael-GMH	ad7bbd6442	merge upstream	vor 4 Jahren
Slavi Pantaleev	4880dcceb0	Fix OCSP-stapling-related errors due to missing resolver Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	vor 4 Jahren
Michael-GMH	6f40d78353	fix random edits to upstream	vor 4 Jahren
Michael-GMH	85777e8f96	merge with upstream	vor 4 Jahren
Slavi Pantaleev	1ed0857019	Fix syntax error Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1024	vor 4 Jahren
sakkiii	4a4a7f136e	changes added to hydrogen client	vor 4 Jahren
sakkiii	3436f9c10a	rename to matrix_nginx_proxy_hsts_preload_enabled	vor 4 Jahren
sakkiii	df2d91970d	matrix_nginx_proxy_xss_protection	vor 4 Jahren
Slavi Pantaleev	6f80292745	Add OCSP stapling support and other SSL optimizations to Hydrogen vhost Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1061 and https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	vor 4 Jahren
Aaron Raimist	9437f78c9e	Build using custom config.json, add CSP, update to 0.1.53	vor 4 Jahren
sakkiii	e9b878b9e9	Optimize SSL session	vor 4 Jahren
Slavi Pantaleev	e6afa05f7b	Enable OCSP stapling for the federation port Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057 Not sure if this is beneficial though.	vor 4 Jahren
Slavi Pantaleev	57a6a98a50	Fix incorrect SSL certificate path Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	vor 4 Jahren
sakkiii	d31b55b2a7	SSL-enabled block only	vor 4 Jahren
Slavi Pantaleev	e4dd933cf0	Make missing /_synapse/admin correctly return 404 responses Fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1058 We may try to capture such calls and return a friendlier response (HTML or JSON) saying "The Synapse Admin API is not enabled", but that may not be desirable. For now, we stick to what "upstream" recommends: "simply don't proxy these APIs", which should lead to the same kind of 404 that we have now. See here: `6660912226/docs/reverse_proxy.md (synapse-administration-endpoints)`	vor 4 Jahren
sakkiii	c05021640d	Enable OCSP Stapling	vor 4 Jahren
Aaron Raimist	ca361af616	Add Hydrogen	vor 4 Jahren
Béla Becker	b10655ebb1	Jitsi XMPP Websocket support Jitsi-meet enabled websockets by default, claiming better reliability. Matrix-nginx-proxy configuration has been set up according to the Prosody documentation: https://prosody.im/doc/websocket	vor 4 Jahren
sakkiii	40fe6bd5c1	variable matrix_nginx_proxy_hsts_preload_enable added	vor 4 Jahren
Slavi Pantaleev	389dc26615	Fix Synapse generic worker balancing Potentially fixes https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/1022	vor 4 Jahren
sakkiii	0ccf0fbf1c	HSTS preload + X-XSS enables HSTS Preloading: In its strongest and recommended form, the [HSTS policy](https://www.chromium.org/hsts) includes all subdomains, and indicates a willingness to be “preloaded” into browsers: `Strict-Transport-Security: max-age=31536000; includeSubDomains; preload` X-Xss-Protection: `1; mode=block` which tells the browser to block the response if it detects an attack rather than sanitising the script.	vor 4 Jahren
sakkiii	29bba5161b	Element More security headers More Production ready nginx headers for Matrix client element.	vor 4 Jahren
Michael-GMH	50d7209c5b	GMH v04.3	vor 4 Jahren
Slavi Pantaleev	e00ef04b57	Add opt-out-of-FLoC headers by default	vor 4 Jahren
teutat3s	2bf7c26cfa	Don't expose nginx version with each response	vor 4 Jahren
sakkiii	1958d0792d	Update matrix-client-element.conf.j2	vor 4 Jahren
sakkiii	05042f5ff1	Improve security grafana - duplicate X-Content-Type-Options - X-Frame-Options header - Referrer-Policy [Might consider adding variable] - Secure flag with cookies - matrix_grafana_content_security_policy variable for [Content Security Policy](https://grafana.com/docs/grafana/latest/administration/configuration/#content_security_policy)	vor 4 Jahren

1 2 3 4

168 Commits (ece163b29ff49ef706cbfb4bbeebe3d3f7aee2ef)