security/hakurei.app
security/hakurei.app
5
1
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 4 Wiki Activity
6,465 Commits 2 Branches 4 Tags
Commit Graph

6465 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Micay
f672e046fd improve naming for http limit conn zone 2023-02-11 04:25:11 -05:00
Daniel Micay
7fcd8bf9a8 move error_log configuration to top level 2023-02-11 04:05:33 -05:00
Daniel Micay
f6bf4d9ca2 publish new release notes 2023-02-10 15:49:53 -05:00
Daniel Micay
6a5760c911 prepare next release notes 2023-02-10 13:34:39 -05:00
Daniel Micay
0c3e2eff66 new build number 2023021000 2023-02-10 13:33:50 -05:00
Daniel Micay
75dacfef0e add SUPL force disable toggle 2023-02-10 08:46:57 -05:00
Daniel Micay
30b5aafe32 add request time to log format 2023-02-10 08:28:02 -05:00
Daniel Micay
b903dd72ac switch to improved custom log format 
This switches to a fully custom log format instead of using a variant of
the standard combined format since we don't use any tools requiring the
logs to be a standard format. This provides a cleaner format, allows us
to freely add new fields and gets rid of legacy/redundant fields.

The redundant timestamp already provided as the syslog timestamp is
dropped along with the legacy identd field always set to a dash.

This adds the connection serial number for identifying requests coming
from the same connection. TLS version is added as a replacement for our
previous addition of the URI scheme. This also adds the total request
length and total bytes sent to the client instead of only the body bytes
sent.
 2023-02-10 08:04:25 -05:00
Daniel Micay
10652acf13 add paragraph about broken router DHCP tables 2023-02-10 07:47:37 -05:00
Daniel Micay
1bc589d45f drop HTTP/2 Push support since Chromium dropped it 
This only improves performance for the initial page load by sending
resources that are almost always needed before the client receives the
preload headers and fetches them. It can degrade performance in some
edge cases such as clients with web fonts disabled or if the session
cookie is cleared without the cache being cleared. Clients can cancel
the push transfers once they start receiving them, but it's wasteful.

Safari and Firefox still support this feature but are likely to follow
the lead of Chromium and drop support for it. Few websites are going to
bother with it without Chromium support and usage is already dropping.
 2023-02-10 03:56:20 -05:00
Daniel Micay
3b4c47b51b reduce client body / header timeouts to 15s 2023-02-09 18:42:15 -05:00
Daniel Micay
7a823438d0 remove deprecated stylelint rules 2023-02-09 17:53:18 -05:00
Daniel Micay
5260801290 reduce sendfile max chunk to 256k 2023-02-09 17:51:01 -05:00
dependabot[bot]
d1dce982d0 Bump stylelint and stylelint-config-standard 
Bumps [stylelint](https://github.com/stylelint/stylelint) and [stylelint-config-standard](https://github.com/stylelint/stylelint-config-standard). These dependencies needed to be updated together.

Updates `stylelint` from 14.16.1 to 15.0.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/stylelint/stylelint/compare/14.16.1...15.0.0)

Updates `stylelint-config-standard` from 29.0.0 to 30.0.1
- [Release notes](https://github.com/stylelint/stylelint-config-standard/releases)
- [Changelog](https://github.com/stylelint/stylelint-config-standard/blob/main/CHANGELOG.md)
- [Commits](https://github.com/stylelint/stylelint-config-standard/compare/29.0.0...30.0.1)

---
updated-dependencies:
- dependency-name: stylelint
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: stylelint-config-standard
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-09 15:03:10 -05:00
Daniel Micay
76cc4ae336 avoid unnecessary ACME challenge redirects 2023-02-09 10:12:20 -05:00
Daniel Micay
763c17a058 unify HTTP redirect server blocks 2023-02-09 09:50:08 -05:00
Daniel Micay
3909151fc8 use default HTTP/2 input buffer size 2023-02-09 05:13:03 -05:00
Daniel Micay
5c4e3ba68b Apps version 15 2023-02-08 14:48:42 -05:00
Daniel Micay
a00136ecee add missing release notes 2023-02-08 03:33:32 -05:00
Daniel Micay
c8c06ed068 update max supported Play Store version 2023-02-08 03:30:03 -05:00
Daniel Micay
3dcace569f Chromium 110.0.5481.64 2023-02-07 18:52:44 -05:00
Daniel Micay
0366f5916d document Dialer dark mode improvement 2023-02-07 08:23:43 -05:00
Daniel Micay
172ee92e71 clarify Seedvault origin 2023-02-07 03:44:12 -05:00
Daniel Micay
9fd85093eb publish new release notes 2023-02-07 01:56:38 -05:00
Daniel Micay
aa06416543 document using 5.15 LTS for builds 2023-02-06 20:20:53 -05:00
Daniel Micay
31445f556b new build number 2023020600 2023-02-06 17:20:18 -05:00
Daniel Micay
5f83bfb3f6 prepare February update release notes 2023-02-06 15:52:35 -05:00
Daniel Micay
0c0651a2e8 update coral/flame vendor files 2023-02-06 15:43:47 -05:00
Daniel Micay
d29c408762 fix Vanadium original-package workaround 2023-02-06 08:56:50 -05:00
Daniel Micay
7da5a5eeb5 switch to age encryption for security.txt 2023-02-06 02:24:45 -05:00
Daniel Micay
410c53dd15 update setup wizard string branding 2023-02-05 12:21:47 -05:00
Daniel Micay
536c76f3a0 Seedvault update + security fix 2023-02-05 03:07:38 -05:00
Daniel Micay
2f82dfc4c0 5.10 GKI LTS update 2023-02-05 01:19:10 -05:00
Daniel Micay
45e72938c6 update 5.15 GKI LTS 2023-02-05 01:17:09 -05:00
Daniel Micay
59b1f4225e use more specific gitignore rules 2023-02-04 03:12:39 -05:00
dependabot[bot]
f954a7f9ae Bump terser from 5.16.2 to 5.16.3 
Bumps [terser](https://github.com/terser/terser) from 5.16.2 to 5.16.3.
- [Release notes](https://github.com/terser/terser/releases)
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terser/terser/compare/v5.16.2...v5.16.3)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-03 14:45:46 -05:00
Daniel Micay
d25983103e clarify install available apps change 2023-02-03 14:44:23 -05:00
Daniel Micay
b082f589ad document verified boot improvements 2023-02-03 10:34:16 -05:00
Daniel Micay
cdb0c5bc45 package parser cache is usually < 1s saved time 2023-02-03 07:03:21 -05:00
Daniel Micay
b0ff1577d6 fix typo 2023-02-03 05:43:20 -05:00
Daniel Micay
d772b0d335 publish new release notes 2023-02-03 05:41:19 -05:00
Daniel Micay
269b1f3e5c drop deprivileged setup wizard change 2023-02-02 13:07:04 -05:00
Daniel Micay
331c48b64f new build number 2023020200 2023-02-02 08:36:29 -05:00
Daniel Micay
7bca0e5f5f add fontconfig to build dependency list 2023-02-02 05:41:18 -05:00
Daniel Micay
cec5be9f0a QPR2 Beta 3 kernel updates 2023-02-02 02:54:49 -05:00
Daniel Micay
b29f7c09c1 GKI LTS kernel updates 2023-02-02 02:50:27 -05:00
Daniel Micay
ee04491290 fs-verity enforced at boot for system app updates 2023-02-02 02:33:33 -05:00
Daniel Micay
d920f4a470 explain user-facing impact of enforced fs-verity 2023-02-02 01:20:34 -05:00
Daniel Micay
b18eb119aa add further details about the release 2023-02-02 01:12:32 -05:00
Daniel Micay
8683babd9c Chromium 110.0.5481.61 2023-02-01 23:28:09 -05:00