Commit Graph

  • 9fbcc9587d update Element web app configuration Daniel Micay 2022-09-28 12:00:55 -0400
  • 06cd80873f use custom format for access log again Daniel Micay 2022-09-27 10:27:36 -0400
  • 0e16b5798b reduce HTTP/2 chunk size to match TLS record size Daniel Micay 2022-09-26 13:14:40 -0400
  • 9ed069073c use syslog (journald) for nginx access log Daniel Micay 2022-09-25 14:18:13 -0400
  • 7b8a505d17 reduce keepalive requests Daniel Micay 2022-09-24 11:53:02 -0400
  • 9cdf30c08c reduce connection limit to 128 Daniel Micay 2022-09-24 11:27:15 -0400
  • 0bcd3cdca3 reduce HTTP/2 concurrent streams to 16 Daniel Micay 2022-09-24 11:22:11 -0400
  • 46ca28258f reduce max client header buffer size Daniel Micay 2022-09-24 11:11:01 -0400
  • 913cde9ff2 send X-Robots-Tag on errors too Daniel Micay 2022-08-18 18:11:08 -0400
  • e7885e1b87 fix backup timestamps Daniel Micay 2022-08-11 18:17:24 -0400
  • a5c257d8a5 remove legacy Expect-CT header Daniel Micay 2022-08-11 13:52:52 -0400
  • ff010aa945 add initial hardening to remote backup service Daniel Micay 2022-08-11 13:37:29 -0400
  • db209e53b4 move systemd units to subdirectory Daniel Micay 2022-08-11 13:05:24 -0400
  • 36d1b69e6b move systemd units to subdirectory Daniel Micay 2022-08-11 13:05:24 -0400
  • 5a4b71ed29 extend matterbridge service hardening Daniel Micay 2022-08-09 06:18:21 -0400
  • 28c063bdc2 add RemoveIPC=true since systemd lints for it Daniel Micay 2022-08-09 05:01:28 -0400
  • 84cfdcfe4d strip path prefix from backup tarballs Daniel Micay 2022-08-07 08:10:45 -0400
  • be7a6c9187 use modern option style for tar Daniel Micay 2022-08-07 08:01:42 -0400
  • fa61606984 add Origin-Agent-Cluster header Daniel Micay 2022-07-30 20:13:28 -0400
  • 53f0d30d1b add cloud-archive-password.txt to gitignore Daniel Micay 2022-07-22 17:05:18 -0400
  • 8a1b9cdb63 use batch CPU scheduling policy for backups Daniel Micay 2022-07-22 02:16:36 -0400
  • 7054e7c09f add backup scripts and systemd units Daniel Micay 2022-07-22 00:40:20 -0400
  • 989ed9718c add backup directory and keys to gitignore Daniel Micay 2022-07-21 23:43:17 -0400
  • 7c45014149 drop unused PATH setup Daniel Micay 2022-07-18 18:19:25 -0400
  • bb45adb3f7 freeze python dependency versions Daniel Micay 2022-07-18 17:26:47 -0400
  • 0a81e35a23 activate venv automatically Daniel Micay 2022-07-18 17:14:14 -0400
  • d724296a89 add venv to gitignore Daniel Micay 2022-07-18 17:00:30 -0400
  • 90d542e2f4 stop setting CORP header for synapse API for now Daniel Micay 2022-07-13 13:04:46 -0400
  • 9b19b811ac only AF_INET6 is required for mjolnir Daniel Micay 2022-07-11 19:50:21 -0400
  • 6835a0bffb set NODE_ENV=production for mjolnir Daniel Micay 2022-07-10 17:36:16 -0400
  • 69b0ff7bb3 move nginx status API to socket Daniel Micay 2022-07-02 12:34:19 -0400
  • bac4280478 add gixy to deploy script Daniel Micay 2022-06-28 00:03:13 -0400
  • 11579e87ca reduce proxy send timeout Daniel Micay 2022-06-27 23:58:50 -0400
  • 12d81c7885 use standard GrapheneOS mime.types Daniel Micay 2022-06-26 17:51:01 -0400
  • 30209020a7 raise expected nginx version Daniel Micay 2022-06-10 19:40:32 -0400
  • 9feb6f9d14 enable pinning feature for Element Daniel Micay 2022-06-10 19:39:40 -0400
  • 0c46ce2027 deploy nginx snippets Daniel Micay 2022-06-09 18:50:24 -0400
  • cd8acd3b69 Bump actions/setup-python from 3 to 4 dependabot[bot] 2022-06-09 07:22:40 +0000
  • 723c8d9540
    Bump actions/setup-python from 3 to 4 dependabot[bot] 2022-06-09 07:22:40 +0000
  • 3ff1fe54a9 add mjolnir systemd unit Daniel Micay 2022-05-14 16:11:11 -0400
  • c7f189ba29 add nginx mime.types configuration to deployment Daniel Micay 2022-05-12 17:16:07 -0400
  • 2120e77103 improve flock error message Daniel Micay 2022-05-08 05:44:06 -0400
  • 50570dc8a1 use new rsync fsync parameter Daniel Micay 2022-05-05 02:22:36 -0400
  • 04fa0a2224 add file locking to deploy/process scripts Daniel Micay 2022-05-05 00:26:23 -0400
  • 316a5c696b enable sendfile support again Daniel Micay 2022-05-03 19:10:31 -0400
  • 21059f1360 add resolver setup to baseline configuration Daniel Micay 2022-05-02 04:10:42 -0400
  • 087c1a6349 disable traditional stateful TLS session cache Daniel Micay 2022-04-30 22:47:18 -0400
  • a703ab5d8c reduce proxy connect timeout Daniel Micay 2022-04-18 10:26:47 -0400
  • 0a6c8e5c1f use IPv6 only for internal nginx status service Daniel Micay 2022-04-17 13:15:36 -0400
  • 0873450d3f drop matrix.org servers from presence list Daniel Micay 2022-04-13 20:57:42 -0400
  • a87ea1b5fa add grapheneos.org to list with disabled presence Daniel Micay 2022-04-13 16:17:32 -0400
  • df3fa938a5 update Element configuration Daniel Micay 2022-04-13 16:17:08 -0400
  • 14bb49d1e6 combine ssh commands for deployment Daniel Micay 2022-03-24 18:43:43 -0400
  • eb2b9dfe5c Bump actions/checkout from 2 to 3 dependabot[bot] 2022-03-02 07:50:16 +0000
  • 19ecfe954e
    Bump actions/checkout from 2 to 3 dependabot[bot] 2022-03-02 07:50:16 +0000
  • 0ba8425df2 Bump actions/setup-python from 2 to 3 dependabot[bot] 2022-03-01 07:23:42 +0000
  • 60b3bf561d
    Bump actions/setup-python from 2 to 3 dependabot[bot] 2022-03-01 07:23:42 +0000
  • 218927ac6e switch to certbot webroot plugin Daniel Micay 2022-02-19 08:17:14 -0500
  • a90db4883e DoS mitigation Daniel Micay 2022-02-05 00:05:34 -0500
  • 5571abff90 remove version workaround Daniel Micay 2021-12-20 13:14:52 -0500
  • ae26501ad4 CSP changes June 2021-12-14 19:27:08 -0500
  • 5041ae9bf5 use Python 3.10 for CI Daniel Micay 2021-12-14 18:36:14 -0500
  • 84df782352 improve unset Element version workaround Daniel Micay 2021-12-13 11:44:00 -0500
  • 548554be39 set charset in Content-Type header for CSS too Daniel Micay 2021-12-10 05:55:59 -0500
  • 525e5f5e9d add workaround for Element version being unset Daniel Micay 2021-12-10 05:53:33 -0500
  • 91cb36d7a0 disable legacy X-XSS-Protection feature Daniel Micay 2021-12-10 04:31:03 -0500
  • 27934d8d58 set a max connection limit to synapse from nginx Daniel Micay 2021-12-03 22:33:54 -0500
  • cdcd278394 nginx: enable aio_write due to 1.20.2 AIO fix Daniel Micay 2021-11-28 19:02:37 -0500
  • a2bfaef2fc nginx: disable sendfile due to bugs with AIO Daniel Micay 2021-11-28 19:01:38 -0500
  • 237d0a5f27 replace obsolete CSP directive and maybe solve CORS issue June 2021-11-27 16:34:32 -0500
  • 33adc373b8
    Bump pyparsing from 2.4.7 to 3.0.6 dependabot[bot] 2021-11-26 01:39:39 +0000
  • c008ad5539 add pip to dependabot Daniel Micay 2021-11-25 20:39:14 -0500
  • c4cceaaf24 replace nginx lint workflow Daniel Micay 2021-11-25 20:35:06 -0500
  • 8b4e119821 use a temporary directory for nginx configuration Daniel Micay 2021-11-25 20:33:45 -0500
  • 43c8ac3c45 add dependabot configuration Daniel Micay 2021-11-23 20:27:45 -0500
  • d44f983d4d set default country code to Canada Daniel Micay 2021-11-23 20:17:35 -0500
  • b172e96897 remove sample feature from configuration Daniel Micay 2021-11-23 20:12:27 -0500
  • 7c2425cd50 remove unused webmanifest extension Daniel Micay 2021-11-23 20:06:54 -0500
  • bfcc6b5958 nginx regex: don't capture groups unnecessarily Daniel Micay 2021-11-23 20:00:41 -0500
  • 5fcd75f795 rename static_tmp to static-tmp for consistency Daniel Micay 2021-11-23 18:45:28 -0500
  • 0ae1a5a9f4 preserve timestamps for zopfli Daniel Micay 2021-11-23 18:28:10 -0500
  • f945befca2 nginx: use syslog for error log Daniel Micay 2021-09-07 08:05:23 -0400
  • 19222d2b0a add nginx modules symlink Daniel Micay 2021-07-28 00:44:32 -0400
  • b66981925a update symlink metadata sync call Daniel Micay 2021-07-27 22:31:36 -0400
  • a97dd92eb8 minor improvements to CSP Daniel Micay 2021-07-22 00:12:22 -0400
  • 1a6400af4e split brotli and zopfli jobs Daniel Micay 2021-07-21 17:19:03 -0400
  • 8a4a3ef0df stop unnecessarily copying mtime for gz output Daniel Micay 2021-07-21 16:57:49 -0400
  • 265576f637 compress static files in parallel Daniel Micay 2021-07-21 16:43:49 -0400
  • dc00b338c6 run GitHub workflows on pushes to any branch Daniel Micay 2021-07-16 16:02:37 -0400
  • fa9de7b0e0 disable aio_write temporarily Daniel Micay 2021-07-13 23:30:24 -0400
  • faa1b0a270 permit frames fetching resources for Element CORP Daniel Micay 2021-07-13 22:27:38 -0400
  • e1d5caf206 raise file size limit to 100M Daniel Micay 2021-07-13 22:27:12 -0400
  • 25fa8047c8 use matrix.grapheneos.org as the remote Daniel Micay 2021-07-11 19:54:32 -0400
  • 6374567f88 rename scripts Daniel Micay 2021-07-11 19:51:56 -0400
  • 3e94c41567 remove unused pdf file extension Daniel Micay 2021-07-07 04:41:08 -0400
  • 75e800cdab add wasm mime type Daniel Micay 2021-07-06 14:13:18 -0400
  • 740b720285 enable brotli/gzip via precompression for Element Daniel Micay 2021-07-06 13:53:00 -0400
  • a653d8bd2f use jemalloc for synapse Daniel Micay 2021-07-04 08:27:24 -0400
  • 9074148b6e add gzip/brotli configuration for future use Daniel Micay 2021-07-04 03:34:49 -0400
  • c98929ea0d set manifest-src to 'self' for Element Daniel Micay 2021-07-03 08:56:02 -0400