Commit graph

46 commits

Author SHA1 Message Date
Alexandre Aubin
6632184257 Propagate changes related to manifestv2 2023-01-30 19:22:59 +01:00
Alexandre Aubin
ac52667ca0
Merge pull request #180 from YunoHost/improve-systemd-security
Improve systemd hardening
2022-11-20 17:53:57 +01:00
Alexandre Aubin
028e7303ab
Update conf/systemd.service
Co-authored-by: Tagada <36127788+Tagadda@users.noreply.github.com>
2022-11-20 17:52:43 +01:00
yalh76
dd377da623 spaces 2022-07-02 18:44:48 +02:00
ericgaspar
0b331e5179 Update nginx.conf 2022-06-06 08:52:14 +02:00
Alexandre Aubin
b6af3ebb37
systemd conf: Add AF_NETLINK address family 2022-01-25 01:29:14 +01:00
Alexandre Aubin
f6f814e69b
Update systemd.service 2022-01-19 19:40:39 +01:00
ericgaspar
d109e6c4b7 Remove HTTPS redirection 2021-11-16 22:31:57 +01:00
yalh76
965f253be5
Merge pull request #136 from YunoHost/sandbox-baseline-for-systemd-services
[WIP] Add some systemd.service security baseline
2021-06-11 00:02:06 +02:00
Kay0u
cc0ac3c16a
Fix systemd stdout/stderr 2020-12-10 13:46:39 +01:00
Alexandre Aubin
6dd9c32323
Not sure why but @priviledged is causing issue on some legit services.. 2020-11-11 20:00:58 +01:00
Alexandre Aubin
f1ec6a6c85
Add RestrictAddressFamilies and SystemCallFilter 2020-11-11 19:54:27 +01:00
Alexandre Aubin
1ac3a1c1f7
Add RestrictNamespaces=yes 2020-11-11 19:15:01 +01:00
Alexandre Aubin
fe29c72b12
Remove two options that may in fact cause issues ... and add a bunch of CapabilityBoundingSet instructions that should be somewhat sane defaults ? 2020-11-11 18:50:52 +01:00
Alexandre Aubin
2b8e86f9c3
Update systemd.service 2020-11-11 16:02:30 +01:00
ericgaspar
f2ca6c9efd
Update app.src 2020-10-10 12:02:45 +02:00
maniack
b3755ebdee Set the default php version to use 2020-02-08 12:39:48 +01:00
Maniack Crudelis
dcc4ae8e3c
Keep /var/run for the socket 2019-01-30 11:43:26 +01:00
Maniack Crudelis
92a4b25310
Update to the php7 default pool file 2019-01-30 11:41:59 +01:00
Kayou
cadde232c4
conf file with new version 2019-01-30 00:32:05 +01:00
Kayou
e3959bcdad
Merge pull request #1 from kay0u/patch-2
[fix] nginx confirm with the new PHP version
2019-01-30 00:29:14 +01:00
Kayou
31676484e3
[fix] nginx confirm with the new PHP version 2019-01-28 09:27:08 +01:00
Kayou
4da7d3fd1d
[fix] fpm file with the new version of php 2019-01-28 01:51:49 +01:00
Maniack Crudelis
2588f45c2f Remove ini file for php 2018-10-02 01:11:07 +02:00
tituspijean
82a743eb17 Fix typos 2018-08-08 23:04:20 +02:00
Maniack Crudelis
8a2330837b Add comments and upgrade some stuff 2018-06-28 22:05:35 +02:00
Maniack Crudelis
2d21ec6163 Update fix alias_traversal 2018-01-03 23:24:48 +01:00
Maniack Crudelis
9824705dfb
Fix the issue alias_traversal
https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md
2017-12-30 00:15:12 +01:00
Maniack Crudelis
5ef1d07752 Add a systemd default file 2017-09-05 17:47:31 +02:00
Maniack Crudelis
a625ad79da [enh] Some corrections 2017-08-28 23:55:51 +02:00
Maniack Crudelis
fad80c3cfb Merge pull request #24 from YunoHost/update_appsrc
Update app.src
2017-07-01 23:39:02 +02:00
Maniack Crudelis
b5f2c7a22c Merge pull request #25 from YunoHost/update_nginx
[enh] Update nginx.conf
2017-06-25 16:40:43 +02:00
Maniack Crudelis
97be4680dd Merge pull request #26 from YunoHost/update_phpfpm
[enh] Update php-fpm
2017-06-25 16:40:32 +02:00
Maniack Crudelis
4812b4cfbf [enh] Add a php-fpm.ini file 2017-06-02 17:57:12 +02:00
Maniack Crudelis
f9a96d0a29 [enh] Update php-fpm 2017-06-02 17:55:03 +02:00
Maniack Crudelis
4d59043a59 [enh] Update nginx.conf 2017-06-02 17:49:54 +02:00
Maniack Crudelis
359fedfa60 Update app.src 2017-06-02 17:46:46 +02:00
Maniack Crudelis
195f5d470e Move app.src 2017-02-04 20:31:11 +01:00
Moul
daaf1005d5 [enh] create blocks for MySQL and PHP command lines which are optionnals. 2016-06-14 14:09:29 +02:00
mbugeia
e5692fd924 Remove https rewrite, not needed 2015-10-27 16:06:56 +01:00
mbugeia
5bccfd3267 Implement some best practice and mysql example 2015-10-27 16:03:21 +01:00
polytan02
ed4e711c8e Correction of typo 2015-10-10 21:45:35 +02:00
polytan02
cfcb62cd97 Dedicated php-fpm process
Addition of base commands to manage a dedicated php-fpm process very easily
Standard empty app is not modified or changed.
2015-10-10 21:28:09 +02:00
Julien Malik
0783688328 Update nginx.conf 2014-11-21 14:31:23 +01:00
Alexis Gavoty
8712752081 Update nginx.conf 2014-10-20 19:37:52 +02:00
opi
914b85a251 Initial commit 2014-10-20 18:55:53 +02:00