Râu Cao
cb0fc27134
Refactor tor usage, set up new tor proxy on draco
2023-07-29 16:26:20 +02:00
Râu Cao
15b2ea284a
Migrate mastodon proxy to openresty
2023-07-26 15:44:04 +02:00
Râu Cao
66f5217a41
Refactor Mastodon nginx recipe for proxy usage
...
Works both as local deployment and proxy (via roles and environments)
* Use upstreams for proxy_pass
* Access static assets from proxy, configure caching for them
* Move Tor config to environment, install via role
* ...
2022-11-30 12:02:17 +01:00
49c75bbb05
Add Onion-Location header for kosmos.social
...
Tells Tor Browser where to find the native onion site.
refs #201
2021-01-25 12:09:28 +01:00
05cd38a5b9
Re-enable and improve Tor access for kosmos.social
2021-01-23 14:22:34 +01:00
047526e0fc
Don't configure HTTPS site when certs missing
2021-01-13 09:49:49 +01:00
9d13acd41a
Don't fail on first run, when Tor hostname missing
2021-01-13 09:49:36 +01:00
Greg Karékinian
0b579b1fea
Remove the redirection from HTTP to HTTPS from the mastodon vhost
...
This is already done in the certbot vhost
(https://gitea.kosmos.org/kosmos/chef/src/branch/master/site-cookbooks/kosmos-nginx/templates/default/nginx_conf_certbot.erb )
and it redirects every request to HTTPS, breaking Let's Encrypt
validation
Fixes #110
2019-10-28 11:18:31 +01:00
10b6f6370e
Configure Mastodon to use its Tor hidden service
2019-09-02 14:39:25 +02:00
89027f1f32
Fix maintenance page paths
2019-05-07 16:10:23 +02:00
99a677ec47
Configure maintenance error page for 503
2019-05-07 15:52:58 +02:00
1ee2b5ad41
Add maintenance page feature to Mastodon nginx site
2019-05-07 15:49:01 +02:00
Greg Karékinian
17f1b2a20a
Create a nginx_certbot_site resource to remove duplication
...
It creates a folder, the nginx vhost for certbot and HTTP redirects, and
also runs certbot and recreates the nginx vhost that includes the TLS
cert
2019-03-15 19:03:28 +01:00
0a3763fe5d
Fix accidental error in Mastodon nginx config
...
The well-known folder wasn't served properly anymore.
2017-09-04 10:06:41 +02:00
8afa5ef106
Add vapid keys to template; don't cache SW
2017-07-31 13:55:27 +02:00
Greg Karékinian
3549b8594a
Enable IPv6 and HTTP2 on Mastodon
2017-04-07 18:26:49 +02:00
Greg Karékinian
de11c0d691
Set up an instance of Mastodon for Kosmos
...
Refs #19
Use new application cookbook, update our cookbooks
2017-04-06 21:20:51 +02:00