projects / opensrf-equinox.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d2683cd) | patch
LP#1711145 NGINX sample config security improvements
authorBill Erickson <berickxx@gmail.com>
Wed, 11 Jul 2018 16:27:05 +0000 (12:27 -0400)
committerGalen Charlton <gmc@equinoxinitiative.org>
Mon, 5 Nov 2018 16:12:52 +0000 (11:12 -0500)
commit7d144fbdb50b3d91c8fd9429f35838b37f3cd83c
treec99b1a9993a930a2cf1aca1d1ca23498777aea73tree | snapshot
parentd2683cd6d552fdbc6dc25e24cc2aa6c047243b4ccommit | diff
LP#1711145 NGINX sample config security improvements

* Adds security recommendations from
https://mozilla.github.io/server-side-tls/ssl-config-generator/
* Enables http2
* Apply a 5-minute proxy read timeout to avoid too-short timeouts on
  long API calls.
* Adds a (commented) section on sending nginx logs to syslog

Includes INSTALL notes on generating the dhparam file.

Signed-off-by: Bill Erickson <berickxx@gmail.com>
Signed-off-by: Galen Charlton <gmc@equinoxinitiative.org>
README diff | blob | history
examples/nginx/osrf-ws-http-proxy diff | blob | history
OpenSRF with Equinox developments in process and local tweaks