Commit Graph

31 Commits

Author SHA1 Message Date
am97 9dd8dcd5ee
Remove legacy header X-Download-Options in nginx.conf examples (#2077)
The header was relevant for Internet Explorer only and was removed from the nextcloud/server code: ea0e45d81e

Signed-off-by: Andrés Maldonado <maldonado@codelutin.com>
2023-10-15 18:17:21 +00:00
Stavros Kois 8df9b2617e
Updates X-Robot-Tag in nginx.conf examples (#1960)
* Update X-Robot-Tag in nginx.conf example

Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>

* update nginx.conf examples

* Update .examples/docker-compose/insecure/mariadb/fpm/web/nginx.conf

Co-authored-by: J0WI <J0WI@users.noreply.github.com>
Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>

* apply to all files

---------

Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Co-authored-by: J0WI <J0WI@users.noreply.github.com>
2023-04-02 16:33:05 +00:00
J0WI 3eb80c52b1
Support SELinux in docker-compose.yml examples (fix #324) (#1957)
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
2023-03-28 16:05:53 +00:00
J0WI 30bb621341
Update MariaDB to 10.6 (#1956)
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
2023-03-28 15:35:15 +00:00
Adam Monsen d1d0d89ba7
Enable MariaDB binary log (#1881)
* Enable MariaDB binary log

This resolves a warning in the database server log:

    [Warning] You need to use --log-bin to make --binlog-format work.

Pros:

* support for point-in-time recovery
* necessary for replication

Cons:

* slows down database operations ("slightly", per the manual)
* takes up disk space (mitigated by `--expire-logs-days=2`)

See also:

* <https://mariadb.com/kb/en/binary-log/>
* <https://mariadb.com/kb/en/full-list-of-mariadb-options-system-and-status-variables/>

Alternatives:

1. Do not add `--log-bin`. Remove `--binlog-format` instead. This causes the least amount of change for existing installations.

Signed-off-by: Adam Monsen <haircut@gmail.com>

* remove --expire-logs-days=2 mariadb flag

This better aligns with recommendations in the Nextcloud documentation.

Also: the flag isn't necessary. There are already set times for cleanup: The MySQL and MariaDB documentation both state that binary logs will be purged on startup and flush/rotation.

Signed-off-by: Adam Monsen <haircut@gmail.com>

---------

Signed-off-by: Adam Monsen <haircut@gmail.com>
2023-02-17 14:13:12 +00:00
Adam Monsen 2a5bc6f3bb
enable mariadb auto upgrade (#1814)
* enable mariadb auto upgrade

This fixes after-upgrade issues, for example:

    [ERROR] Incorrect definition of table mysql.event: expected column 'definer' at position 3 to have type varchar(, found type char(141).

The upgrade only happens when necessary.

I also disabled the system database backup because I assume users create
and test their own backups.

Signed-off-by: Adam Monsen <haircut@gmail.com>

* use 1s instead of "yesplease"

Any nonzero value is valid for these environment variables.

Signed-off-by: Adam Monsen <haircut@gmail.com>

Signed-off-by: Adam Monsen <haircut@gmail.com>
2022-09-06 16:45:45 +00:00
Jan Kiesewetter 522559eefd Prevent nginx HTTP Server Detection
Signed-off-by: Jan Kiesewetter <jan@t3easy.de>
2022-02-17 14:55:39 +01:00
aney1 f4dbcf523a
add rewrite rule from official docs to nginx examples (#1635)
Without this rewrite rule you can't access some pages (like LDAP config).
These lines are present in the official docs: https://docs.nextcloud.com/server/latest/admin_manual/installation/nginx.html

Signed-off-by: aney1 <aney1@users.noreply.github.com>
2021-11-25 13:04:39 +00:00
J0WI 1a432d98fa
Lock mariadb to 10.5 in examples (fix #1536) (#1539)
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
2021-07-18 22:00:36 +00:00
fariszr c769eb86e1
don't expose insecure ports to the public (#1523)
* don't expose insecure ports to public

* don't expose insecure ports to public

Signed-off-by: Fariszr <35614734+fariszr@users.noreply.github.com>
2021-07-18 21:52:26 +00:00
J0WI a92ea90731
Update nginx.conf (#1517)
https://github.com/nextcloud/documentation/blob/master/admin_manual/installation/nginx-root.conf.sample
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
2021-06-27 15:14:11 +00:00
J0WI 953ebac32b
Reduce examples (#1484) 2021-04-26 17:15:37 +00:00
J0WI 6b6c68cabf
Serve mp4 and webm files directly in nginx (#1076)
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
2020-04-22 21:16:45 +00:00
alexschroth 269a081138 examples: docker-compose: Update nginx configs (#912)
* examples: docker-compose: insecure: postgres: Update nginx.conf

This commit applies the latest nginx configuration from the official
documentation. Therefore it also helps to fix CVE-2019-11043.

References:

- https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm
- https://docs.nextcloud.com/server/17/admin_manual/installation/nginx.html

Signed-off-by: Alexander Schroth <alexander.schroth@fau.de>

* examples: docker-compose: insecure: mariadb-cron-redis: Update nginx.conf

This commit applies the latest nginx configuration from the official
documentation. Therefore it also helps to fix CVE-2019-11043.

References:

- https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm
- https://docs.nextcloud.com/server/17/admin_manual/installation/nginx.html

Signed-off-by: Alexander Schroth <alexander.schroth@fau.de>

* examples: docker-compose: insecure: mariadb: Update nginx.conf

This commit applies the latest nginx configuration from the official
documentation. Therefore it also helps to fix CVE-2019-11043.

References:

- https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm
- https://docs.nextcloud.com/server/17/admin_manual/installation/nginx.html

Signed-off-by: Alexander Schroth <alexander.schroth@fau.de>

* examples: docker-compose: with-nginx-proxy: mariadb: Update nginx.conf

This commit applies the latest nginx configuration from the official
documentation. Therefore it also helps to fix CVE-2019-11043.

References:

- https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm
- https://docs.nextcloud.com/server/17/admin_manual/installation/nginx.html

Signed-off-by: Alexander Schroth <alexander.schroth@fau.de>

* examples: docker-compose: with-nginx-proxy: mariadb-cron-redis: Update nginx.conf

This commit applies the latest nginx configuration from the official
documentation. Therefore it also helps to fix CVE-2019-11043.

References:

- https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm
- https://docs.nextcloud.com/server/17/admin_manual/installation/nginx.html

Signed-off-by: Alexander Schroth <alexander.schroth@fau.de>

* examples: docker-compose: with-nginx-proxy: postgres: Update nginx.conf

This commit applies the latest nginx configuration from the official
documentation. Therefore it also helps to fix CVE-2019-11043.

References:

- https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm
- https://docs.nextcloud.com/server/17/admin_manual/installation/nginx.html

Signed-off-by: Alexander Schroth <alexander.schroth@fau.de>

* examples: docker-compose: with-nginx-proxy-self-signed-ssl: mariadb: Update nginx.conf

This commit applies the latest nginx configuration from the official
documentation. Therefore it also helps to fix CVE-2019-11043.

References:

- https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm
- https://docs.nextcloud.com/server/17/admin_manual/installation/nginx.html

Signed-off-by: Alexander Schroth <alexander.schroth@fau.de>
2019-11-07 20:30:48 +01:00
ykgmfq 53bb46d1dc Let nginx decide on number of worker processes (#732)
From https://www.nginx.com/blog/tuning-nginx/:
In most cases, running one worker process per CPU core works well,
and we recommend setting this directive to auto to achieve that.
There are times when you may want to increase this number,
such as when the worker processes have to do a lot of disk I/O.
2019-06-19 00:37:44 +02:00
Guy Elsmore-Paddock 0b9f09e3e1 Issue #674 - Fix Remaining `.woff2` Issues in NGinx Config Examples
This ensures that the remaining NGinx config examples are updated to handle WOFF 2 font files.

Closes #674.

Signed-off-by: Guy Elsmore-Paddock <guy@inveniem.com>
2019-03-04 19:37:37 -05:00
J0WI aa5c0c1929 Use Alpine Linux in examples and use default user
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
2018-11-20 20:24:22 +01:00
Louis Matthijssen a31db79ae9
Add Referrer-Policy header examples for nginx 2018-09-11 19:38:17 +02:00
Tilo Spannagel 71b4d891f8
Use $request_uri instead of $uri in nginx config
Signed-off-by: Tilo Spannagel <development@tilosp.de>
2018-08-16 17:59:03 +02:00
Tilo Spannagel 654ddeae23 Remove trailing whitespaces 2018-08-01 22:55:25 +02:00
rabaraho d905503a6e Changed db build to pre-existing image with command arguments 2018-04-19 12:47:19 -04:00
Tilo Spannagel b2e04519ed
Use custom Dockerfile instead of mounted config
Signed-off-by: Tilo Spannagel <development@tilosp.de>
2018-03-21 14:39:09 +01:00
Greek 8c86333de9 * Fix the Transaction Isolation Level of the MYSQL/MariaDB Databases
in the .example section.
2018-02-08 20:34:08 +01:00
Tilo Spannagel 122e66ca7c
Set client_max_body_size to 10G 2017-09-30 13:14:13 +02:00
Tilo Spannagel 0548adf1c1
Use autoconfig.php provided by the image 2017-09-27 13:29:15 +02:00
Tilo Spannagel 01dd1a93f1
Add depends_on 2017-09-27 13:29:15 +02:00
Tilo Spannagel b120af8e7f
Add Dockerfile for nginx 2017-09-27 13:29:13 +02:00
Tilo Spannagel f1515a32dc
Add insecure docker-compose examples for fpm 2017-09-27 13:29:12 +02:00
Tilo Spannagel 0ba11e9ca3
Remove unnecessary links 2017-09-27 13:29:12 +02:00
Tilo Spannagel 53b8aabfe9
Add mysql option 2017-09-27 13:29:12 +02:00
Tilo Spannagel 83b027fbae
Add insecure docker-compose examples for apache 2017-09-27 13:29:11 +02:00