Some elaborate defaults were not used. They look kind of useful, but
also suggest maintenance nightmares (default cipher list), so let's
get rid of them.
* server handshakes log opt out
* http2 server push have been made obsolete
from nginx 1.25.1 (https://nginx.org/en/CHANGES)
*) Feature: the "http2" directive, which enables HTTP/2 on a per-server basis; the "http2" parameter of the "listen" directive is now deprecated.
*) Change: HTTP/2 server push support has been removed.
* 'listen ... http2' directive is deprecated
migrate to http2 directive
* ver bump and descr
* add resolver directive support
* add GUI config preview
* gzip disabling support
* move bots UA to GUI
* Add auto-ban log
* ban.volt: show readable time in grid
* vts.css: add tables headers borders
* Add Upstream keepalives
* constraint fix
* ver bump
* Add Stream proxy_connect_timeout and proxy_timeout support
* maintainer's suggestions
Co-Authored-By: Fabian Franz BSc <fabianfrz@users.noreply.github.com>
* Keepalive vs sockets additional help text
* no moment.js needed
* reflect core selectpicker update
* maintainer's suggestions
Co-Authored-By: Fabian Franz BSc <fabianfrz@users.noreply.github.com>
* Update www/nginx/src/opnsense/mvc/app/views/OPNsense/Nginx/index.volt
Co-authored-by: Fabian Franz BSc <fabianfrz@users.noreply.github.com>
* maintainer's suggestions
Co-Authored-By: Fabian Franz BSc <fabianfrz@users.noreply.github.com>
* refactor a bit
-don't use global vars unnecessarily
-move css to separate file
-don't touch DOM for clipboard copy. use stored value
-don't use <pre> if violating standard
-add Button label translation
-check if clipboard write supported before link show()
-use text() instead of html() if possible
-change 'DOM ready' handler syntax
thnx @fabianfrz
* safety first
use lodash _.unescape to safely decode string without DOM manipulations
---------
Co-authored-by: Fabian Franz BSc <fabianfrz@users.noreply.github.com>
* add support for resetting timed out connections and 444 responses (reset_timedout_connection)
* add option to change autoban response code to 444 (NGX_HTTP_CLOSE)
* add ssl_reject_handshake directive support
* add error log severity level support for HTTP and Stream servers
* add logging of possible errors causes to the setup script
* $internalModelUseSafeDelete enabled in API Settings controller to check item references before delete
* minor style adjustments for IP ACL and SNI Based Routing forms
* fix: add the PROXY protocol for the HTTPS listener too, if it is set for the server
* fix: set Stream server outbound PROXY protocol based on Upstream settings
* fix: set Trusted Proxies (set_real_ip_from) for Stream server only with PROXY protocol enabled
WARNING: set_real_ip_from directive is temporary disabled due to ngx_stream_realip module missing
* fix: do not include commented out core rules in naxsi policies when importing
* fix: fixed a typo in setting the proxy_ssl_session_reuse directive value (thanks to Sigurd Våg Aaknes)
* use syslog
* enable set_real_ip_from
* move config test to setup script
* typo
* rfc8701
* rfc8701
* includes
* version bump
* ignore SCSVs (rfc5746 and rfc7507)
* add http_post hook
so we can add maps if needed
* Update pkg-descr
Franco Fichtner
kulikov-aandGitHub
Fabian Franz BScandGitHub
kulikov-aandGitHub
Fabian Franz