]> git.evergreen-ils.org Git - OpenSRF.git/commit
projects / OpenSRF.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ec9f1a7) | patch
LP#1711145 NGINX sample config security improvements
authorBill Erickson <berickxx@gmail.com>
Wed, 11 Jul 2018 16:27:05 +0000 (12:27 -0400)
committerGalen Charlton <gmc@equinoxinitiative.org>
Mon, 5 Nov 2018 16:14:00 +0000 (11:14 -0500)
commitb021738d770b85e2117a719820e7fbb7e6749a28
tree9ddae62f6ce09ec9889bfd9f4babc3bb3f64db58tree
parentec9f1a709c6f9a083dd25d01edb6eedc84dea556commit | diff
LP#1711145 NGINX sample config security improvements

* Adds security recommendations from
https://mozilla.github.io/server-side-tls/ssl-config-generator/
* Enables http2
* Apply a 5-minute proxy read timeout to avoid too-short timeouts on
  long API calls.
* Adds a (commented) section on sending nginx logs to syslog

Includes INSTALL notes on generating the dhparam file.

Signed-off-by: Bill Erickson <berickxx@gmail.com>
Signed-off-by: Galen Charlton <gmc@equinoxinitiative.org>
README diff | blob | history
examples/nginx/osrf-ws-http-proxy diff | blob | history
OpenSRF