274 Commits

Author SHA1 Message Date
Daniel Micay
2a86216b37 simplify redirect for broken backlinks 2021-05-18 17:18:45 -04:00
Daniel Micay
5f018c01e1 treat mask-icon.svg as an implementation detail 2021-05-18 14:05:02 -04:00
Daniel Micay
9634d20dca keep redirect location blocks together 2021-05-18 13:58:15 -04:00
Daniel Micay
ca24fdebc5 use prefix match for fonts instead of regex 2021-05-18 02:45:10 -04:00
Daniel Micay
ea67f9c6b2 convert regex location into exact match 2021-05-18 02:35:59 -04:00
Daniel Micay
2544be1006 reduce cache time for SVG served as /favicon.ico
Cache busting isn't available for /favicon.ico when it isn't fetched for
an HTML page.
2021-05-17 11:16:34 -04:00
Daniel Micay
cf9bc8d45f use SVG for /favicon.ico if browser asks for it
This makes Chromium use the SVG favicon universally including as the
favicon for non-HTML files.
2021-05-17 10:58:14 -04:00
Daniel Micay
f1f3ee0cab remove legacy graphene.png redirect 2021-05-16 06:28:00 -04:00
Daniel Micay
7f89a19b00 stop logging not found files as errors 2021-05-16 05:03:31 -04:00
Daniel Micay
4e3f449c2d fail fast on mta-sts bot traffic 2021-05-16 04:50:20 -04:00
Daniel Micay
fb1be51f68 rename grapheneos.css to main.css 2021-05-14 22:28:12 -04:00
Daniel Micay
7a7648e6de redirect 404 /page/ to /page if /page.html exists 2021-05-14 13:12:51 -04:00
Daniel Micay
d29f7ed91b add comment explaining HTTPS redirect approach 2021-05-11 17:56:22 -04:00
Daniel Micay
959d3e2053 include scheme and host in access log 2021-05-07 02:21:51 -04:00
Daniel Micay
10923373ec use relative paths for TLS state 2021-05-06 18:51:49 -04:00
Daniel Micay
380e40bf74 use more granular session ticket key rotation 2021-05-02 13:33:06 -04:00
Daniel Micay
0823948133 enable session tickets with rotation script 2021-05-02 02:12:34 -04:00
Daniel Micay
0c03bb5737 add redirect from unused mta-sts root 2021-04-29 14:14:30 -04:00
Daniel Micay
e8f8516acd nginx: add source map support 2021-04-29 11:34:40 -04:00
Daniel Micay
e7344aa837 enable open file cache for main static root 2021-04-26 21:13:37 -04:00
Daniel Micay
b2e4477300 nginx: raise open file limit 2021-04-25 18:49:52 -04:00
Daniel Micay
f66cae5a86 reduce reliance on try_files (inefficient) 2021-04-25 17:44:21 -04:00
Daniel Micay
36e63fcbef raise keepalive_timeout to prior HTTP/2 value 2021-04-23 20:49:08 -04:00
Daniel Micay
f3320a54d1 prefer ChaCha20 for clients without hardware AES 2021-04-23 16:31:17 -04:00
Daniel Micay
59cbca7083 update nginx configuration for 1.20.0 2021-04-23 15:54:16 -04:00
Daniel Micay
e4fcd76ece use 429 response code for conn limit 2021-04-19 15:43:41 -04:00
Daniel Micay
5e83027d04 disable unused Clipboard API features 2021-04-18 00:49:50 -04:00
Daniel Micay
1f027a3fce disable unused hid (WebHID API) feature 2021-04-18 00:40:47 -04:00
Daniel Micay
380e34f435 disable unused serial (Web Serial API) feature 2021-04-18 00:37:16 -04:00
Daniel Micay
3584a627f8 disable interest-cohort feature 2021-04-18 00:34:46 -04:00
Daniel Micay
8a392845a7 add missing qualifier for CORP header setting 2021-04-17 04:55:49 -04:00
Daniel Micay
d89ba6bbcf redirect mangled backlinks to /usage#updates 2021-04-17 04:21:36 -04:00
Daniel Micay
2efda9f4da redirect broken backlink to /faq 2021-04-17 04:18:24 -04:00
Daniel Micay
aff5f4def1 disable obsolete msie_padding feature 2021-04-17 03:57:32 -04:00
Daniel Micay
6d4a724f80 nginx: limit sendfile chunk size 2021-04-17 01:47:33 -04:00
Daniel Micay
c812d96b51 set keepalive_requests to match nginx mainline 2021-04-16 23:56:39 -04:00
Daniel Micay
6aeda1a29e nginx: remove redundant tcp_nodelay option 2021-04-16 13:34:00 -04:00
Daniel Micay
2632df2a2f remove obsolete mask icon redirects 2021-04-16 08:42:48 -04:00
Daniel Micay
39c0b55422 finish setting up CORP headers and document issues 2021-04-15 04:37:25 -04:00
Daniel Micay
56d73685e3 avoid breaking image hotlinking for now 2021-04-15 04:23:34 -04:00
Daniel Micay
e7f6cff9c2 remove legacy mstile redirects 2021-04-15 03:23:50 -04:00
Daniel Micay
682c078830 simplify error page configuration 2021-04-14 23:41:03 -04:00
Daniel Micay
d069da17c8 set CORP header for error responses too 2021-04-14 23:30:01 -04:00
Daniel Micay
c7d1bdce2e expand same-origin CORP header usage 2021-04-14 23:08:44 -04:00
Daniel Micay
2f61719328 mark js/mjs as immutable too 2021-04-11 23:28:04 -04:00
Daniel Micay
42c521e38b expand same-origin CORP header usage 2021-03-31 14:50:36 -04:00
Daniel Micay
150b04c601 start deploying same-origin CORP conservatively 2021-03-30 13:17:46 -04:00
Daniel Micay
43949eb637 move static site root to /srv 2021-03-30 10:58:04 -04:00
Daniel Micay
19f1f9b700 move mta-sts data to /srv 2021-03-29 17:08:02 -04:00
Daniel Micay
ba1047b121 set immutable for woff2 cache headers 2021-03-27 09:05:58 -04:00