Commit graph

27 commits

Author SHA1 Message Date
Bart Schuurmans 75bc4f8cb0 Make nginx config safer
Instead of allowing all image files anywhere, and disallowing non-image file under /images/, only
allow image files under /images/ and don't match non-image files elsewhere. They get proxied to web
instead and result in a 404 there.

For example, the old config allowed /exports/foo.jpg to be served, while the new config does not.
2024-03-29 15:04:38 +01:00
Hugh Rundle ddc35a7a52
fix multiple issues from user exports config changes
- improve nginx config
- fix DATA_UPLOAD_MAX_MEMORY_SIZE default not being an int
- translate fallback value in id_to_username template tag
- make location of setting to turn on user exports easier to locate for admins

fixes #3227
fixes #3231
fixes #3232
fixes #3236
2024-01-20 13:19:13 +11:00
Milan dd5c314bd5 nginx: also serve svg static files 2024-01-18 22:29:43 +01:00
Milan a59dcfc890 nginx: fix missing ttf static files 2024-01-18 17:03:02 +01:00
Hugh Rundle ea7f3c297e
allow js and css 2024-01-17 20:12:06 +11:00
Hugh Rundle d640e4ac96
disable user exports by default
- new setting to enable user exports defaults to False
- add setting to enable and disable user exports
- do not allow user exports when using s3 storage
- do not serve non-image files from /images/ (requires update to nginx settings)
- increase default file upload limit to 100MB to enable user exports to be imported (can be changed in .env)
2024-01-16 21:32:13 +11:00
Mouse Reeve 8fa8d433aa Re-comment nginx config
I thought this didn't need to be commented out but it does (if it isn't,
it tried to load the cert, which doesn't yet exist)
2023-01-11 16:56:31 -08:00
Mouse Reeve 3a0533b7fc Updates nginx production config
This copies over the changes Trammell added to the development file. I
also realized that I think it's fine to only commend out the https
redirect, rather than commenting out the entire server block for
listening on port 443? If this works it makes the file a lot easier to
read.

Co-authored-by: Trammell Hudson <hudson@trmm.net>
2022-12-11 12:28:53 -08:00
Trammell Hudson 43b194d612 nginx: route /flower to the queue monitoring system.
This patch removes the exposed port for the flower
server and instead uses nginx to route urls /flower/*
to the queue monitoring system.
2022-12-06 13:01:40 +00:00
Trammell Hudson 5922e29369 Enable nginx caching and optimizations.
This patch enabled nginx caching of responses for non-logged in users
so that a boost by a popular mastodon user doesn't DDOS the bookwyrm site.
It also silences some of the nginx access logs so that static files are
not logged.
2022-12-06 13:01:40 +00:00
Mouse Reeve 40ead41176 Fixes rate limiter 2022-11-01 18:17:37 -07:00
Hugh Rundle e1513bf98d amend nginx rate limiting urls 2022-10-15 07:47:20 +11:00
Mouse Reeve e1e6a2d380 Adds block to prod config 2022-07-15 13:19:42 -07:00
Mouse Reeve 143eaf362d Adds rate limiting to some views in nginx 2022-07-15 13:14:31 -07:00
Olof Pettersson 5f10ccd9c7
Comment out trailing block ending
For people installing an instance with only the reverse proxy server, the hidden trailing `}` at the end of the second server block is quite hard to catch and it took me a good while to figure it out. Having the entire server commented out makes the whole process more understandable in my opinion.
2021-12-01 14:18:28 +01:00
nycterent 67d830e327 fixed typo for the domain placeholder for easier substitution 2021-11-07 16:07:21 +02:00
Mouse Reeve 34a5eccba7 Increase max upload size in nginx 2021-09-06 09:43:41 -07:00
Mouse Reeve 8e2acb733c Use non-www domain canonically 2021-09-05 14:13:54 -07:00
Jason Kelly 318e0bf508 Fixing nginx-config misunderstanding. 2021-05-23 14:27:02 +08:00
Jason Kelly e138a585d1 Setting client_max_body_size to 10m.
- Removed commented-out nginx config for clarity.
2021-05-23 14:08:22 +08:00
Pablo Barton d38efa9a9d Easier to deploy by avoiding merge conflicts in production 2021-04-11 13:12:50 -04:00
Mouse Reeve b8040cd0dc Move prod config files to prod branch 2020-10-16 13:02:58 -07:00
Mouse Reeve ba396f19a6 typos in example domain 2020-10-05 14:25:53 -07:00
Mouse Reeve d29ed2746a Removed old prod nginx conf 2020-10-05 14:24:14 -07:00
Mouse Reeve e24eca7da0 Config files for prod deployment 2020-10-05 14:22:37 -07:00
Mouse Reeve 68813f9453 Nginx and certbot config for prod deploy 2020-10-05 14:17:04 -07:00
Mouse Reeve dbabeab470 Nginx config
Fixes #152 (hopefully???)
Fixes #130
Fixes #125
2020-05-17 20:28:46 -07:00