summaryrefslogtreecommitdiff
path: root/nginx
AgeCommit message (Collapse)Author
2023-03-09improve HTTP request loggingDaniel Micay
* add $upstream_cache_status * add '-$connection_requests' after $connection * enable subrequest logging $connection_requests makes it much easier to see connection reuse in the logs and also helps to understand subrequests.
2023-03-07add upstream timing to http log formatDaniel Micay
2023-03-07enable minimal stderr loggingDaniel Micay
2023-03-07ssl_reject_handshake is working as intendedDaniel Micay
2023-03-06update Roboto fontsDaniel Micay
2023-03-06work around unreliable ssl_reject_handshakeDaniel Micay
2023-03-06avoid double logging for nginx error logDaniel Micay
2023-02-27disable keepalive for stub HTTP serviceDaniel Micay
2023-02-26use consistent configuration styleDaniel Micay
2023-02-24disable keepalive for MTA-STSDaniel Micay
2023-02-19add back request method to log formatDaniel Micay
2023-02-19set baseline nginx root directory in http blockDaniel Micay
2023-02-18work around nginx keepalive configuration bugDaniel Micay
https://trac.nginx.org/nginx/ticket/2012
2023-02-18reject connections to invalid namesDaniel Micay
2023-02-18entirely disable access log for status socketDaniel Micay
2023-02-14disable multipart range requestsDaniel Micay
2023-02-11improve naming for http limit conn zoneDaniel Micay
2023-02-11move error_log configuration to top levelDaniel Micay
2023-02-10add request time to log formatDaniel Micay
2023-02-10switch to improved custom log formatDaniel Micay
This switches to a fully custom log format instead of using a variant of the standard combined format since we don't use any tools requiring the logs to be a standard format. This provides a cleaner format, allows us to freely add new fields and gets rid of legacy/redundant fields. The redundant timestamp already provided as the syslog timestamp is dropped along with the legacy identd field always set to a dash. This adds the connection serial number for identifying requests coming from the same connection. TLS version is added as a replacement for our previous addition of the URI scheme. This also adds the total request length and total bytes sent to the client instead of only the body bytes sent.
2023-02-10drop HTTP/2 Push support since Chromium dropped itDaniel Micay
This only improves performance for the initial page load by sending resources that are almost always needed before the client receives the preload headers and fetches them. It can degrade performance in some edge cases such as clients with web fonts disabled or if the session cookie is cleared without the cache being cleared. Clients can cancel the push transfers once they start receiving them, but it's wasteful. Safari and Firefox still support this feature but are likely to follow the lead of Chromium and drop support for it. Few websites are going to bother with it without Chromium support and usage is already dropping.
2023-02-09reduce client body / header timeouts to 15sDaniel Micay
2023-02-09reduce sendfile max chunk to 256kDaniel Micay
2023-02-09avoid unnecessary ACME challenge redirectsDaniel Micay
2023-02-09unify HTTP redirect server blocksDaniel Micay
2023-02-09use default HTTP/2 input buffer sizeDaniel Micay
2023-01-31simplify nginx status pathDaniel Micay
2023-01-17rebase onto current nginx mime.typesDaniel Micay
2023-01-05SSH commit signing will be used going forwardDaniel Micay
2022-12-15add empty traffic-advice configurationDaniel Micay
2022-11-01update Permissions-Policy for web installerDaniel Micay
2022-10-18Update device imagesmdyv
This is a vectorized image of the Pixel 7 Pro, and saves 98 % of the byte length of the previously used image.
2022-10-12increase resolver timeoutDaniel Micay
2022-10-11disable bluetooth in Permissions PolicyDaniel Micay
2022-10-11disable keyboard-map in Permissions PolicyDaniel Micay
2022-10-11disable local-fonts in Permissions PolicyDaniel Micay
2022-10-01rename conn limit memory zoneDaniel Micay
2022-09-27use custom format for access log againDaniel Micay
2022-09-26enable caching for Matrix discovery APIDaniel Micay
2022-09-26reduce HTTP/2 chunk size to match TLS record sizeDaniel Micay
2022-09-25use syslog (journald) for nginx access logDaniel Micay
2022-09-24reduce keepalive requestsDaniel Micay
2022-09-24reduce connection limit to 128Daniel Micay
2022-09-24reduce HTTP/2 concurrent streams to 16Daniel Micay
2022-09-24reduce max client header buffer sizeDaniel Micay
2022-08-25remove legacy Expect-CT headerDaniel Micay
2022-08-25no longer need location block for PDFsDaniel Micay
2022-08-25redirect legacy counterclaim document to historyDaniel Micay
The purpose of this document was to respond to false claims from James Donaldson about myself and GrapheneOS. He changed his story about what happened many times since this was posted. He didn't move forward with his attempt at taking us to court and this was never used beyond being posted on our site as a public response. Nearly all of his supporters realized he was misleading them and left for greener pastures. Most of them are now using GrapheneOS. We don't need to refute outdated attacks on GrapheneOS from a person that's now almost completely irrelevant, especially since he's now trying not to draw attention to this since he came out looking so terrible. He quietly misleads people about what happened with his latest historical revisions and those are countered better by our newer pages summarizing it.
2022-08-25Add "Origin-Agent-Cluster" headerRohan Kumar
Hint to browsers that we prefer per-origin process isolation. This disables certain unsafe features regarding cross-origin same-site resource sharing. https://web.dev/origin-agent-cluster/#limitations Specification link: https://html.spec.whatwg.org/multipage/origin.html#origin-keyed-agent-clusters This is just a hint to browsers. Depending on resource availability, they may or may not actually allocate a process. For this reason, it's not a robust security feature although it is preferable. This header needs to be active on all pages from an origin for it to work.
2022-08-25move nginx status API to socketDaniel Micay
generated by cgit v1.3.1 (git 2.54.0) at 2026-08-31 20:45:08 +0000