security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity
3,137 Commits 2 Branches 4 Tags
Commit Graph

159 Commits

Author SHA1 Message Date
Daniel Micay
7010b230c5 use http2_push instead of http2_push_preload 
This avoids needing to conditionally add nopush to each preloaded
resource in the Link header. There's also no support for pushing
JavaScript modules via http2_push_preload since nginx doesn't have
support for rel=modulepreload.
 2021-12-05 02:48:44 -05:00
Daniel Micay
2cc8f2f9a6 no need for case insensitive match for cookie name 2021-12-04 08:09:14 -05:00
Daniel Micay
fddfa68695 avoid sending unnecessary push cookie 2021-12-04 07:59:53 -05:00
Daniel Micay
5345cf5927 simplify /mask-icon.svg redirect 
This no longer needs to use a regular expression as a workaround now
that file path replacement uses template syntax.
 2021-11-27 00:59:14 -05:00
Daniel Micay
6b26326db5 use preload header with nopush for repeat visitors 2021-11-26 21:27:41 -05:00
Daniel Micay
4027afcf6e add integrity metadata to preload header 2021-11-26 19:41:37 -05:00
Daniel Micay
fd59a56501 disable idle-detection in Permissions-Policy 2021-11-24 02:10:25 -05:00
Daniel Micay
f0479f1393 update font version for preload/push 2021-11-23 23:55:51 -05:00
Daniel Micay
75f4b33323 set up SRI for future use by CSP v3 2021-11-18 19:08:54 -05:00
Rohan Kumar
9918b7cc77 Nginx regex: don't capture groups unnecessarily 
Good regex form: use "?:" to specify non-capturing groups when sections
don't actually reference matched groups. There's no use saving a capture
in these situations.
 2021-11-11 14:59:35 -05:00
Daniel Micay
9d87e3e5b8 nginx: use syslog for error_log 2021-09-07 08:00:17 -04:00
Daniel Micay
0e2e39ad52 add another FAQ redirect 2021-08-30 18:49:23 -04:00
Daniel Micay
598ce1fef8 add redirect for broken backlinks with comma 2021-08-22 12:29:27 -04:00
Daniel Micay
d577da336f add SVG Tiny Portable/Secure icon for BIMI 
https://bimigroup.org/
https://datatracker.ietf.org/doc/html/draft-svg-tiny-ps-abrotman-00
 2021-08-10 02:25:41 -04:00
Daniel Micay
89095afe99 rename primary to 0 and replica1 to 1 2021-07-30 03:02:46 -04:00
Daniel Micay
e1ccefd1fa add support for ACME with replicas 2021-07-30 02:32:33 -04:00
Daniel Micay
5a6fe754df nginx: use build defaults for user/pid settings 
This varies based on the OS and packaging. It's best to make the
assumption that it's a reasonable nginx package rather than reducing
portability.
 2021-06-26 21:57:04 -04:00
Daniel Micay
e06942c803 cleaner nginx status monitoring configuration 2021-06-22 23:43:14 -04:00
Daniel Micay
9c8deacbd9 add back legacy redirect 2021-06-21 22:23:07 -04:00
Daniel Micay
4f829a530b set security headers for Matrix client metadata 2021-06-21 03:49:39 -04:00
Daniel Micay
e941ca1a40 fix redirects for broken twipu links 2021-06-13 04:05:18 -04:00
Daniel Micay
bd3cfebafd fix object replacement character redirect 2021-06-11 10:18:57 -04:00
Daniel Micay
d0e54474fe convert if back into location block 2021-06-07 12:57:33 -04:00
Daniel Micay
6a54597de8 remove legacy underscore redirects (unused) 2021-06-04 23:37:11 -04:00
Daniel Micay
23455a1879 add redirect away from old SVG favicon 2021-06-03 17:04:37 -04:00
Daniel Micay
b620834f20 reorder nginx location blocks 2021-06-02 21:31:46 -04:00
Daniel Micay
5262ad4ee7 make index files into an implementation detail 2021-06-02 20:57:01 -04:00
Daniel Micay
81fa2a6f23 treat html extension as an implementation detail 
These redirects aren't being used for any of the actual pages based on
the access logs.
 2021-06-02 20:07:52 -04:00
Daniel Micay
e1ea020f2a add grapheneos.ca domain 2021-05-31 14:51:56 -04:00
Daniel Micay
4f144773e3 add grapheneos.net domain 2021-05-28 16:15:39 -04:00
Daniel Micay
1b244d9543 add Matrix client homeserver delegation 2021-05-24 12:10:16 -04:00
Daniel Micay
8e31124e3c add Matrix homeserver delegation 2021-05-24 11:30:14 -04:00
Daniel Micay
4c1e81764a drop types_hash_max_size configuration 2021-05-23 10:59:06 -04:00
Daniel Micay
9a27eeecbd simplify favicon.svg rewrite 2021-05-19 09:28:24 -04:00
Daniel Micay
aafebaed00 add /favicon.svg location block 2021-05-19 09:08:27 -04:00
Daniel Micay
2a86216b37 simplify redirect for broken backlinks 2021-05-18 17:18:45 -04:00
Daniel Micay
5f018c01e1 treat mask-icon.svg as an implementation detail 2021-05-18 14:05:02 -04:00
Daniel Micay
9634d20dca keep redirect location blocks together 2021-05-18 13:58:15 -04:00
Daniel Micay
ca24fdebc5 use prefix match for fonts instead of regex 2021-05-18 02:45:10 -04:00
Daniel Micay
ea67f9c6b2 convert regex location into exact match 2021-05-18 02:35:59 -04:00
Daniel Micay
2544be1006 reduce cache time for SVG served as /favicon.ico 
Cache busting isn't available for /favicon.ico when it isn't fetched for
an HTML page.
 2021-05-17 11:16:34 -04:00
Daniel Micay
cf9bc8d45f use SVG for /favicon.ico if browser asks for it 
This makes Chromium use the SVG favicon universally including as the
favicon for non-HTML files.
 2021-05-17 10:58:14 -04:00
Daniel Micay
f1f3ee0cab remove legacy graphene.png redirect 2021-05-16 06:28:00 -04:00
Daniel Micay
7f89a19b00 stop logging not found files as errors 2021-05-16 05:03:31 -04:00
Daniel Micay
4e3f449c2d fail fast on mta-sts bot traffic 2021-05-16 04:50:20 -04:00
Daniel Micay
fb1be51f68 rename grapheneos.css to main.css 2021-05-14 22:28:12 -04:00
Daniel Micay
7a7648e6de redirect 404 /page/ to /page if /page.html exists 2021-05-14 13:12:51 -04:00
Daniel Micay
d29f7ed91b add comment explaining HTTPS redirect approach 2021-05-11 17:56:22 -04:00
Daniel Micay
959d3e2053 include scheme and host in access log 2021-05-07 02:21:51 -04:00
Daniel Micay
10923373ec use relative paths for TLS state 2021-05-06 18:51:49 -04:00