Commit graph

107 commits

Author SHA1 Message Date
Nolan Lawson
5bd6d4de27 update image-src/media-src to be more lax 2017-05-03 22:39:33 -07:00
Fred Wenzel
b98af5e96d Add default CSP
Add a default CSP that allows anything from the local domain, plus inline styles, data: URIs, and no framing.
2017-04-21 21:57:48 -07:00
Ash Furrow
22c52995ad Adds note about persisting volumes. (#113) 2017-04-22 00:34:36 +02:00
Gervais Gwenaël
9efa9b69d8 Small URL error in Resources-needed.md (#116)
Corrected "https://mastodon.technllogy" to "https://mastodon.technology"
2017-04-22 00:29:06 +02:00
cubefoo
553d04cf43 update nginx ssl config (#120)
To further increase security add a strong Diffie-Hellman group, which is standard practice when setting up ssl certs. Anyone who can setup letsencrypt can also setup a DH group.
2017-04-22 00:28:43 +02:00
Nate Berkopec
7bde3a602a Make tuning.md a little more accurate 2017-04-21 12:16:27 -06:00
James
fa8d76c406 Add administration section on how to create users while registration is closed (#107) 2017-04-20 20:08:05 +02:00
Chris Castle
85ff981217 Fix bad quote char in IAM policy (#108) 2017-04-20 20:07:32 +02:00
Tachibana waita
509793419d add git fetch line to upgrade section (#110) 2017-04-20 20:06:21 +02:00
Eugen
38fcd2a5c9 Merge pull request #98 from ashfurrow/docker-update
Updates Docker Update Instructions for git
2017-04-20 14:46:56 +02:00
wxcafé
3c211890df Fixes update section 2017-04-20 02:17:52 +02:00
Simon
ffe2935f5c Add cost estimate column (#91)
* Add cost estimate column

To give interested admin an idea of what expected costs might be.

* Add estimate for mastodon.technology 

based on blog post

* Fix missing header dashes
2017-04-20 01:09:09 +02:00
Sergiusz Bazański
95a6040458 Mention yarn install in production upgrade guide (#62) 2017-04-19 18:44:07 +02:00
Aaron Coburn
18e4c617a2 Update link (#93)
Fix typo
2017-04-19 18:36:28 +02:00
Ben Hamill
43692e45b0 Mention Yarn in Dev Docs (#100)
Adds a mention of `yarn install` in the development guide so people know
to, well, run it.
2017-04-19 18:28:13 +02:00
wxcafé
a6f0fbc043 Might have not been a good idea 2017-04-19 18:21:28 +02:00
wxcafé
507de093a6 Adds disk usage and fixes info for my instance 2017-04-19 17:03:35 +02:00
Ash Furrow
24e97522a6
Updates update instructions. 2017-04-18 20:58:59 -04:00
Matt Jankowski
4b67a3574b Import from main repo README (#82)
* Add docker guide from main repo readme

* Add maintenance tasks doc to running section

* Clean up markdown in prod guide

* Move guidance to use tagged releases to docs

* Move local domain and host config to docs repo

* Title of page

* Update Production-guide.md
2017-04-18 16:32:47 +02:00
Ash Furrow
d0f619f23a Added documentation. (#85) 2017-04-18 16:14:57 +02:00
Florent Viel
1a82d42d76 fix typo (#86) 2017-04-18 16:14:20 +02:00
wxcafé
1dee21633b Adds the mastodon-admin Mailing list 2017-04-17 17:49:49 +02:00
Boris Mann
1388d60f42 Updated Mailgun instructions (#76)
This is not quite step-by-step yet, but at least indicates that you need to do more than just adding the Mailgun add on.
2017-04-17 17:14:55 +02:00
Ashley
18b243df0d Make it clearer that installing 'vagrant-hostsupdater' is optional (#78) 2017-04-17 17:14:14 +02:00
Erwan Leboucher
0b5cb11d08 Use the united command for daily task (#81)
commit of mastodon here e17f9d5e1a
2017-04-17 17:13:15 +02:00
Valentin Lorentz
35abda9b20 Fix bandwidth units for oc.todon.fr (#80)
* Fix bandwidth units for oc.todon.fr

(+ round the values a bit)

* Fix units again

* Consistency
2017-04-17 17:12:50 +02:00
Lukas Burk
124a1c1646 Add users:clear rake task to admin guide (#73) 2017-04-17 02:07:34 +02:00
Dolf RATTMANN
a893d018ba Prevent people from pulling master in production (#71) 2017-04-17 00:32:34 +02:00
Naouak
9c1972673a Customization with custom.scss documentation (#56)
* Customization with custom.scss documentation

* Update Customizing.md
2017-04-17 00:26:17 +02:00
wxcafé
eb32fc9738 Specifies to run the latest tagged release 2017-04-16 16:14:31 +02:00
Wxcafé (Clément Hertling)
602ba587f9 Merge remote-tracking branch 'origin/master' 2017-04-16 12:03:45 +02:00
Valentin Lorentz
52708eb561 Resources needed: Add oc.todon.fr stats and more columns (#57)
* Resources needed: Add oc.todon.fr stats and more columns

* Resources needed: Add details on the server model
2017-04-16 11:57:39 +02:00
nightpool
c631975d93 Fix typo
fix two small typos
2017-04-15 20:13:06 -04:00
Ash Furrow
4e1e8bf7aa Added recommendation against running free dynos in production. (#54) 2017-04-15 23:58:33 +02:00
wxcafé
77469f413d Create Ressources-needed.md 2017-04-15 21:30:01 +02:00
Edwin Torres
e743a88870 Fixed grammatical error and incorrect icon filename (#45)
* Fixed grammatical error. 'Setup' should be 'set up' in two places

* Fixed incorrect filename for Follow icon
2017-04-15 01:10:09 +02:00
James Moore
3cfacecb6c moved things into alternatives.md 2017-04-14 15:53:38 -07:00
wxcafé
9ffcb6f10d Merge pull request #5 from feragon/openrc
Add init scripts
2017-04-14 10:23:48 +02:00
Florian Roméo
2652c9dd0a Move init scripts to Misc.md 2017-04-14 10:06:01 +02:00
wxcafé
bdf7d53c9a Merge pull request #29 from jemus42/patch-1
Add info about already set HTTP headers
2017-04-14 02:07:34 +02:00
wxcafé
6e431d26de Removes duplicate HSTS directive 2017-04-14 02:03:03 +02:00
wxcafé
368d815e4d Removes the includeSubDomains directive from HSTS 2017-04-14 02:00:01 +02:00
wxcafé
f2814435d5 Merge branch 'master' into patch-2 2017-04-14 01:56:54 +02:00
wxcafé
5bbee7f69e Merge pull request #14 from datn/master
made pg_hba.conf addition with ident for Ubuntu 16.04
2017-04-14 01:53:07 +02:00
wxcafé
5c7a3ec16c Merge pull request #12 from staticsafe/master
Use 127.0.0.1 instead of localhost in Sidekiq proxy_pass.
2017-04-14 01:50:51 +02:00
Lukas Burk
dae0d21d57 Add info about already set HTTP headers
Intended to avoid setting duplicate HTTP headers which will cause issues with tools like Mozilla Observatory many people use to evaluate an instance's security.
2017-04-13 19:37:33 +02:00
wxcafé
d960311faa Merge pull request #23 from foozmeat/pr-cron
simplified the cronjob section
2017-04-13 19:30:43 +02:00
James Moore
b8cd7a99d4 removed weird dot characters 2017-04-13 10:28:57 -07:00
codl
0005b49faf example nginx: remove includeSubDomains from hsts 2017-04-13 10:28:50 +02:00
James Moore
9c679e3741 simplified the cronjob section 2017-04-12 21:57:04 -07:00