security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity
8,248 Commits 2 Branches 4 Tags
Commit Graph

338 Commits

Author SHA1 Message Date
Daniel Micay
1c70723a13 staging 2025-06-20 20:05:11 -04:00
Daniel Micay
19876e35c9 switch to new session ticket keys location 2025-05-27 14:04:19 -04:00
Daniel Micay
53c604e3cd raise fetchpriority for important images 
This was detected by PageSpeed Insights as an issue and it makes sense
to address it.
 2025-05-08 00:04:35 -04:00
Daniel Micay
298c357bc9 handle Let's Encrypt removing OCSP support 
We can no longer use OCSP stapling and Must-Staple. These will soon be
obsolete once the `shortlived` profile is available for public use since
it will provide certificates with a similar lifetime as OCSP responses.

In the meantime, we've moved to the `tlsserver` profile stripping legacy
features to prepare for the `shortlived` profile which will be identical
to `tlsserver` but with a validity period of 6 days.
 2025-05-04 23:46:56 -04:00
Daniel Micay
b984f3204c drop comment with minimum nginx version 2025-04-23 19:39:11 -04:00
Daniel Micay
501ee0e087 update ssl_session_ticket_key comment 2024-10-02 21:35:47 -04:00
Daniel Micay
5af1d1fd25 drop redundant comment 2024-10-02 21:27:42 -04:00
sandbank52641
d0cbf321a8 add wake locks to web installer 
Sets wake locks during long-running operations, such as downloading and
flashing the release.

Close: https://github.com/GrapheneOS/grapheneos.org/issues/837
Test: Manual
 2024-09-21 23:07:45 -04:00
Daniel Micay
0b3aaf9e4e add preload for redirect.js on features page 2024-06-28 10:47:56 -04:00
Daniel Micay
537379979b set worker_shutdown_timeout to 1 hour 2024-06-23 12:14:11 -04:00
Daniel Micay
dd09f07d45 add logging for TLS session reuse 2024-04-25 16:02:16 -04:00
Daniel Micay
15cdc9c6a7 use small fixed TCP buffer sizes for non-TLS HTTP 2024-04-25 11:29:51 -04:00
Daniel Micay
983211a7e3 replace deprecated http2 listen parameter 2024-04-24 20:03:31 -04:00
Daniel Micay
b132434929 add redirects for query parameters with static HTML 2024-04-20 13:24:43 -04:00
Daniel Micay
3aedbbdf5d remove extra space 2024-04-13 19:10:36 -04:00
Daniel Micay
886106e5b2 add grapheneos.foundation domain 2024-04-13 19:10:32 -04:00
Daniel Micay
0dbca6bc75 nginx: reset timed out HTTP(S) connections 2024-04-10 17:33:29 -04:00
Daniel Micay
fb8dce4506 include security headers for vanadium.app root 2024-04-08 17:51:25 -04:00
Daniel Micay
6cd5d9353c handle leading double slash for redirect 2024-04-06 16:45:41 -04:00
matchboxbananasynergy
fd14e3123a Redirect from /ubl to new bootloader locking FAQ section 2024-03-31 16:45:35 -04:00
matchboxbananasynergy
063287a256 add redirect from /UBL to FAQ section 2024-03-31 15:54:21 -04:00
Daniel Micay
19cc7a9097 drop legacy UTF-8 replacement character redirect 2024-03-23 10:05:31 -04:00
Daniel Micay
32b684ecec drop unnecessary quotes 2024-03-23 09:52:16 -04:00
Daniel Micay
517c9ef396 avoid regex location for webmanifest 2024-03-22 20:45:51 -04:00
Daniel Micay
fa6725b935 drop legacy twipu redirects 2024-03-22 19:47:08 -04:00
Daniel Micay
47c93808a7 add limited cache time for vanadium.app redirect 2024-03-20 21:08:01 -04:00
Daniel Micay
26bfd66fe1 add another comment for working around nginx bug 2024-03-20 21:07:21 -04:00
Daniel Micay
26d90ef5d6 stop redirecting the entire vanadium.app domain 2024-03-20 20:52:36 -04:00
Daniel Micay
5b4912b289 disable keepalive by default 
No need for keepalive for the internal socket.
 2024-03-20 19:22:02 -04:00
Daniel Micay
65e1272640 nginx: double per-worker connection and file limit 2024-03-18 17:39:10 -04:00
Daniel Micay
9e1c1a731f add redirect for community rules forum thread 2024-03-12 02:57:34 -04:00
Daniel Micay
eb594178ae replace placeholder Vanadium redirect 2024-02-24 21:32:12 -05:00
Daniel Micay
8ae0f54a9c add redirect.js preload to servers page 2024-02-24 15:39:59 -05:00
Daniel Micay
dda0ad5996 sort preload URIs 2024-02-24 15:39:15 -05:00
Orazio
8ba2118a2a fix redirect to eSIM support 2024-01-31 14:34:50 -05:00
dd-dreams
7da8c03156 add redirect to new section 2024-01-30 13:52:11 -05:00
Daniel Micay
6fbd66ddfa use 301 redirect with 1 day caching for Discord 
There are scenarios where we may have to change the URL so the default
301 behavior is inappropriate but this will work fine.
 2023-12-25 10:56:27 -05:00
Daniel Micay
02a97dd883 use long form Discord link 
https://discord.gg/grapheneos is a 301 redirect to
https://discord.com/invite/grapheneos so it makes sense to use the long
form to avoid a redirect.
 2023-12-24 02:32:57 -05:00
Daniel Micay
bbe5e44924 use custom invite link for Discord 2023-12-21 12:17:18 -05:00
Daniel Micay
82a514a5e3 add discord redirect 2023-11-22 20:36:43 -05:00
Daniel Micay
c748d7e960 simplify nginx configuration deployment 2023-07-15 17:56:13 -04:00
smdyv
4430036ea2 Change string markings for replacements 2023-07-13 16:08:16 -04:00
Daniel Micay
fafee3dcbc drop legacy block-all-mixed-content 2023-07-11 11:23:57 -04:00
Daniel Micay
bfdffb6751 block WebRTC in Content Security Policy 2023-07-10 23:04:29 -04:00
Daniel Micay
74b26bbba5 use new OCSP cache path 2023-07-09 18:34:22 -04:00
Daniel Micay
7bf9b26716 drop legacy info on APEX components 2023-06-27 22:49:40 -04:00
Daniel Micay
8972cabb0f move mta-sts to mail server 2023-06-21 14:57:31 -04:00
Daniel Micay
0982a9df80 move mta-sts.mail.grapheneos.org to mail server 2023-06-21 13:52:02 -04:00
Daniel Micay
a93b9da909 remove obsolete redirect 2023-06-06 14:10:39 -04:00
Daniel Micay
1775719fb3 avoid configuration warning with nginx 1.24.0 2023-05-23 18:02:49 -04:00