msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-14 11:47:01 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions
169 commits 1 branch 0 tags 274 KiB
Commit graph

80 commits

Author SHA1 Message Date
Harsh Shandilya
92ec3269a9
Caddyfile: remove default CSP 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-06-11 20:54:15 +05:30
Harsh Shandilya
e0066409d9
Caddyfile: the return of stats 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-06-09 21:17:20 +05:30
Harsh Shandilya
4a7bd34b7f
Caddyfile: change up ports just for naivety 
You try telling me this isn't satisfying

$ grep 808 Caddyfile
  proxy / http://localhost:8080 {
  proxy / http://localhost:8081 {
  proxy / http://localhost:8082 {
  proxy / http://localhost:8083 {

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-06-09 21:05:11 +05:30
Harsh Shandilya
be06bdb941
Caddyfile: remove explicit nonces and hashes 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-06-02 02:26:59 +05:30
Harsh Shandilya
f74945ae14
Caddyfile: update CSP 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-06-02 02:24:18 +05:30
Harsh Shandilya
2507b9d34f
Caddyfile: strip CSP header for ACRA 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-05-27 15:18:22 +05:30
Harsh Shandilya
c8f4eb645b
Caddyfile: update CSP again 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-05-16 20:21:02 +05:30
Harsh Shandilya
9b7643602d
Revert "Caddyfile: update CSP" 
This reverts commit 943b398f14.
 2020-05-09 00:42:12 +05:30
Harsh Shandilya
bacb70c38f
Decomission stats.msfjarvis.dev 
This will always be inaccurate due to Cloudflare caching and hence not actually
doing origin pulls

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-05-08 05:05:51 +05:30
Harsh Shandilya
943b398f14
Caddyfile: update CSP 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-05-07 16:27:07 +05:30
Harsh Shandilya
5783f029e0
Caddyfile: decomission webmail 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-27 22:32:52 +05:30
Harsh Shandilya
350e04cf72
Caddyfile: simplify securing /data 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-26 05:37:56 +05:30
Harsh Shandilya
5b2665ee87
Caddyfile: add tt-rss 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-26 05:27:49 +05:30
Harsh Shandilya
cd06bbbdca
Caddyfile: Disable CSP for Mapcrafter 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-24 23:03:20 +05:30
Harsh Shandilya
f268a87d7d
Caddyfile: stop serving X-Content-Type-Options header 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-24 16:08:18 +05:30
Harsh Shandilya
e5f4e081d4 Caddyfile: disable CSP for memocho 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-22 13:00:44 +00:00
Harsh Shandilya
e22853b02c
Caddyfile: strengthen CSP 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-20 00:42:01 +05:30
Harsh Shandilya
9ac7751a5d
Caddyfile: dont set CSP for webmail 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-18 15:14:59 +05:30
Harsh Shandilya
13edc68e48
Revert "Caddyfile: Allow loading images from GitHub" 
Replacing with a better fix

This reverts commit 4994dd060a.
 2020-04-18 15:14:33 +05:30
Harsh Shandilya
4994dd060a
Caddyfile: Allow loading images from GitHub 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-18 04:20:41 +05:30
Harsh Shandilya
ff9fe15982
Strip nosniff header for mail server 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-17 17:59:44 +05:30
Harsh Shandilya
128d0a6140
Caddyfile: protect data dir 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-16 19:40:57 +05:30
Harsh Shandilya
914f8aa111
Add mail.msfjarvis.dev 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-16 19:31:18 +05:30
Harsh Shandilya
d52720b9a3
Decommission .website routing 
Will let Cloudflare Page Rules handle this

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-04-15 21:11:36 +05:30
Harsh Shandilya
c4bc0c2e56
Caddyfile: Disable TLS 1.0/1.1 
SSL Labs has started capping grades to B for servers that support TLS 1.0 and/or TLS 1.1
so I believe this is finally the time to get rid of these protocols

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-03-29 12:41:31 +05:30
Harsh Shandilya
e01aa8854c
Caddyfile: Add mc.msfjarvis.dev 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-03-25 21:54:22 +05:30
Harsh Shandilya
3be59c0e3c
Caddyfile: Add bin.msfjarvis.dev 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-03-04 12:27:35 +00:00
Harsh Shandilya
78ea780225
Caddyfile: Don't set Cache-Control headers 
Cloudflare handles it for us

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-02-29 15:36:16 +05:30
Harsh Shandilya
d4ec967832
Caddyfile: Update commento port 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-02-29 09:53:38 +00:00
Harsh Shandilya
1237b2d1de
Caddyfile: Add ACRA 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-02-22 14:15:35 +05:30
Harsh Shandilya
a060b4630e
Caddyfile: Disallow non-Cloudflare origins 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-02-20 04:33:04 +05:30
Harsh Shandilya
89a61329ba
Reformat with 2 space indent 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-02-14 03:18:44 +05:30
Harsh Shandilya
3668963fc9
Caddyfile: Allow loading fonts from the data: format 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-02-09 22:05:05 +05:30
Harsh Shandilya
574ee62118
Caddyfile: Allow unsafe-eval for stats server 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-02-09 22:03:22 +05:30
Harsh Shandilya
8e49980cc6
Caddyfile: Add more image sources 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-02-09 08:06:19 +00:00
Harsh Shandilya
a03129e0ca
Caddyfile: Remove deprecated report-uri directive 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-02-09 13:21:52 +05:30
Harsh Shandilya
0af27cdf57
Caddyfile: Setup CSP 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
 2020-02-09 13:10:55 +05:30
Harsh Shandilya
137cf4cca5
Caddyfile: Setup CSP reporting 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-01-30 19:57:21 +05:30
Harsh Shandilya
15bd2591e2
Revert "Disable CORS" 
This reverts commit b5d5e9f9cb.
 2020-01-30 19:55:55 +05:30
Harsh Shandilya
fcb0f9405e
Caddyfile: Remove defunct site 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-01-30 19:39:05 +05:30
Harsh Shandilya
d312cc3fc5
Cleanup duplicates in Caddyfile 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-01-26 19:58:44 +05:30
Harsh Shandilya
655b9ba993
Decommission portainer 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-01-26 19:58:27 +05:30
Harsh Shandilya
b5d5e9f9cb
Disable CORS 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-01-26 19:36:49 +05:30
Harsh Shandilya
e476e77ca8
Decomission some underutilized services 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-01-24 14:34:12 +05:30
Harsh Shandilya
1039eb52f7
Caddyfile: Add commento backend 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-01-22 01:55:32 +05:30
Harsh Shandilya
d2bd6b42a4
Caddyfile: Setup Caesium FKM JSON redirects 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-01-15 02:12:21 +05:30
Harsh Shandilya
4ff641e4f4
Caddyfile: Route 404 errors on homepage to 404.html 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2020-01-10 12:33:33 +05:30
Harsh Shandilya
3ea1bf2af0
Caddyfile: Update paths 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2019-12-27 01:33:55 +05:30
Harsh Shandilya
f74b071e1b
Caddyfile: Add Nextcloud 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2019-12-26 22:48:51 +05:30
Harsh Shandilya
657d4cbee5
Caddyfile: sort 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
 2019-12-26 22:47:02 +05:30