projects / opensrf-equinox.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5c803ae) | patch
LP#1711145 NGINX sample config security improvements
authorBill Erickson <berickxx@gmail.com>
Wed, 11 Jul 2018 16:27:05 +0000 (12:27 -0400)
committerGalen Charlton <gmc@equinoxinitiative.org>
Mon, 5 Nov 2018 16:14:30 +0000 (11:14 -0500)
commit3db305ba4329b4c93d16b03800755d5807de4de0
tree7ef94ec82a5fc70be357c006e66ffe7cacbb1447tree | snapshot
parent5c803ae4550bf0e4a992c217baeaffabee30c45acommit | diff
LP#1711145 NGINX sample config security improvements

* Adds security recommendations from
https://mozilla.github.io/server-side-tls/ssl-config-generator/
* Enables http2
* Apply a 5-minute proxy read timeout to avoid too-short timeouts on
  long API calls.
* Adds a (commented) section on sending nginx logs to syslog

Includes INSTALL notes on generating the dhparam file.

Signed-off-by: Bill Erickson <berickxx@gmail.com>
Signed-off-by: Galen Charlton <gmc@equinoxinitiative.org>
README diff | blob | history
examples/nginx/osrf-ws-http-proxy diff | blob | history
OpenSRF with Equinox developments in process and local tweaks