sbeh
434c4a2b5d
Socket [::]:123 on Linux listens on IPv4 and IPv6
...
This will ensure nginx starts up without the following errors messages:
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] bind() to [::]:443 failed (98: Address already in use)
nginx: [emerg] still could not bind()
Googling for them leads you to this site:
https://chrisjean.com/2014/02/10/fix-nginx-emerg-bind-to-80-failed-98-address-already-in-use/
2014-11-26 00:31:50 +01:00
Marin Jankovski
70f30abd84
Merge pull request #8273 from bbodenmiller/nginx-updates
...
Nginx updates
2014-11-10 10:20:44 +01:00
Ben Bodenmiller
271a352079
minor updates & formatting changes
...
minor updates @ formatting changes to match other versions of file.
Unify formatting of
https://github.com/gitlabhq/gitlabhq/blob/master/lib/support/nginx/gitlab ,
https://github.com/gitlabhq/gitlabhq/blob/master/lib/support/nginx/gitlab-ssl ,
&
https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-cookbooks/gitlab/templates/default/nginx-gitlab-http.conf.erb
2014-11-08 23:33:27 -08:00
Hugo Osvaldo Barrera
e3098b69e7
Don't enable IPv4 *only* on nginx.
...
The current configuration sample files only enable IPv4 by default, making the
server inaccesible for many remote hosts (and an increasing amount every day).
Enable IPv4 and IPv6 by default. Older servers with no external IPv6
connectivity will not fail since they'll have a local-link IPv6 address to bind
to anyway.
2014-11-03 11:25:31 -03:00
Dmitriy Zaporozhets
80e944ac71
Merge pull request #8054 from bbodenmiller/patch-4
...
match latest config from https://cipherli.st/
2014-10-22 16:52:42 +03:00
Ben Bodenmiller
077fc683fa
simplify DHE parameter generation
2014-10-16 14:34:03 -07:00
Ben Bodenmiller
5d7e1b6ae2
match latest config from https://cipherli.st/
2014-10-15 23:51:53 -07:00
Marin Jankovski
be14c7a83f
Add a comment on why we are using backward compatible ciphers.
2014-10-10 09:44:08 +02:00
Marin Jankovski
8ddb2be69a
Revert "update ssl_ciphers"
...
This reverts commit c41e5f5018 .
2014-10-10 09:38:39 +02:00
Sytse Sijbrandij
0cc30145f4
Merge pull request #7664 from bbodenmiller/patch-2
...
add HSTS Policy warning
2014-10-03 12:12:23 +02:00
Ben Bodenmiller
25ee53c3ae
fail_timeout=0 as recommended by Unicorn
...
Set's fail_timeout=0 as recommended by
http://unicorn.bogomips.org/Unicorn/Configurator.html#method-i-timeout
when Unicorn is running behind nginx.
2014-09-12 02:19:38 -07:00
Sytse Sijbrandij
69c4026ec1
Merge pull request #7654 from bbodenmiller/patch-13
...
update ssl_ciphers
2014-09-08 15:07:59 +02:00
Sytse Sijbrandij
bef923055b
Merge pull request #7583 from bbodenmiller/https
...
[Documentation] simplify HTTPS setup details
2014-09-08 11:05:19 +02:00
Ben Bodenmiller
a2b36858f5
add optional nginx configs to make more secure
2014-09-07 23:17:37 -07:00
Ben Bodenmiller
5d5d4ef91a
simplify HTTPS setup details
...
also adds comment about updating nginx files during upgrades
2014-09-07 15:31:13 -07:00
Ben Bodenmiller
c41e5f5018
update ssl_ciphers
...
taken from
https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html /
https://cipherli.st/
backwards compatible ciphers not needed since gitlab does not support
ie8
2014-09-07 14:55:11 -07:00
Ben Bodenmiller
765eabeacc
add HSTS Policy warning
...
Add warning about HSTS header as it means user will need to provide secure connection access to site for next 24 months from page view. See https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security for more details.
2014-09-01 15:47:15 -07:00
Dmitriy Zaporozhets
3069826d1a
Merge pull request #7378 from jojosch/nginx-ssl-redirect
...
Use a ? after the $request_uri to perform a valid Redirect while cloning...
2014-08-28 16:54:36 +03:00
Dmitriy Zaporozhets
eddfdc9edd
Merge pull request #7558 from bbodenmiller/patch-4
...
change X-Frame-Options to SAMEORIGIN for nginx SSL config
2014-08-23 23:50:09 +03:00
Ben Bodenmiller
3663354cb9
unify nginx config files
2014-08-23 01:08:12 -07:00
Ben Bodenmiller
a3953a46f4
change X-Frame-Options to SAMEORIGIN
...
needed to allow sidekiq to load on background jobs tab
2014-08-23 01:05:31 -07:00
johannes
b5481afd73
Use a ? after the $request_uri to perform a valid Redirect while cloning.
...
fixes #6203
before:
❯ curl -I http://gitlab/namespace/repo.git/info/refs?service=git-upload-pack
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Jul 2014 18:20:27 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://gitlab/namespace/repo.git/info/refs?service=git-upload-pack?service=git-upload-pack
after:
❯ curl -I http://gitlab/namespace/repo.git/info/refs\?service=git-upload-pack
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Jul 2014 18:23:54 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://gitlab/namespace/repo.git/info/refs?service=git-upload-pack
[ci skip]
2014-08-23 08:36:25 +02:00
Sytse Sijbrandij
06fade7545
Simplify the description of single hash lines based on comments of Ben Bodenmiller.
2014-08-22 19:10:07 +02:00
Sytse Sijbrandij
8aff39a6d0
Simplify the ssl setup file.
2014-08-04 15:57:59 +02:00
Achilleas Pipinellis
7be6b8ca73
Move gitlab-ssl nginx config from gitlab-recipes
2014-06-05 16:54:50 +03:00
GitLab
fdcc5ddec1
Ensure sidekiq is displayed by setting X-Frame-Options.
2014-06-03 17:06:27 +02:00
Marin Jankovski
636ec6d3a0
Update warnings about relative url support.
2014-05-13 17:59:08 +02:00
Dmitriy Zaporozhets
5307dd5f74
Comment gzip: off be default
2014-04-07 15:47:20 +00:00
Dmitriy Zaporozhets
563fec7349
Disable compression to prevent BREACH attack
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-04-03 13:03:16 +03:00
Marin Jankovski
8af94ed755
Add gzip compression for assets to nginx example.
2014-03-24 14:59:09 +01:00
dosire
6bf5215b23
Some people are getting the error 'The remote end hung up unexpectedly' due to large chuncks.
2014-03-10 09:11:19 +01:00
Jacob Vosmaer
5de16dee76
Add a custom 502 page
2014-01-28 10:19:22 +01:00
Dmitriy Zaporozhets
c3ae30b60e
Merge branch 'upload-limits' into 'master'
...
Upload Limits
Better documentation for the upload limit. Please have a hard time when they need to change the upload limits, see https://gitlab.com/gitlab-org/gitlab-ce/issues/5
2014-01-27 12:44:14 +00:00
Jacob Vosmaer
abae128915
Use either/or to present options
2014-01-27 11:59:15 +01:00
Jacob Vosmaer
7b32be6eb1
Explain what we know about Nginx chunked requests
2014-01-27 11:19:45 +01:00
dosire
42220f2a18
Remove version since we don't keep it up to date.
2014-01-23 15:14:07 +01:00
dosire
7ad70a56d3
Git over ssh and http are different things.
2014-01-22 17:51:00 +01:00
dosire
119c782e0b
More explanation for upload limits.
2014-01-22 17:01:47 +01:00
dosire
60e451fde4
Change canonical urls to GitLab Cloud.
2013-12-30 14:27:18 +01:00
Dmitriy Zaporozhets
f24e151414
Merge pull request #5617 from zeeZ/nginx-proxy
...
Add X-Forwarded-For to nginx config
2013-12-16 03:54:04 -08:00
zeeZ
59b6337de0
Add X-Forwarded-For to nginx config
2013-11-18 10:54:20 +01:00
Joachim Brandon LeBlanc
c09aed8b07
Add client_max_body_size to nginx site
...
Added the client_max_body_size declaration to the nginx server block to prevent 413 errors when http post body is larger than the default (1m).
2013-11-15 11:49:31 -06:00
Sytse Sijbrandij
f01d482427
Make the installation guide easier to follow for non-unix people.
2013-06-12 21:30:36 +02:00
Sytse Sijbrandij
89d6ee1632
This commit got lost https://github.com/gitlabhq/gitlab-recipes/commit/76ba45246e93e9c764580fe54ccfe38da751afbe
2013-06-05 20:08:42 +02:00
Frank Lanitz
aba29ab94c
Adding a short hint to *:80 for default listen address on nginx example config
...
Based on posting https://github.com/gitlabhq/gitlabhq/issues/3384#issuecomment-15457287 I was able to solved an issue here. Pointing out *:80 might could prevent others for struggeling here
2013-05-10 17:45:02 +02:00
Dmitriy Zaporozhets
5ac5f586f8
Move init.d and nginx default recipes in core library to save efforts trying keep sync between gitlab-recipes and gitlabhq
2013-04-22 12:44:09 +02:00