178inaba
fbb0f346c3
Add yarn install option
2017-04-24 22:21:23 +09:00
Eugen
645fd80eff
Merge pull request #134 from zorun/letsencrypt
...
Production guide: add support for let's encrypt in the nginx config
2017-04-23 06:00:14 +02:00
Nolan Lawson
8bc1fd2194
only add cache-control, remove comment
2017-04-22 17:09:39 -07:00
Nolan Lawson
32f4c5319f
add nginx config for static assets
2017-04-22 16:19:53 -07:00
Baptiste Jonglez
a8d244ad42
Production guide: add support for let's encrypt in the nginx config
...
This notably fixes potential issues like this one https://github.com/tootsuite/mastodon/issues/1665
2017-04-22 18:44:22 +02:00
cubefoo
553d04cf43
update nginx ssl config ( #120 )
...
To further increase security add a strong Diffie-Hellman group, which is standard practice when setting up ssl certs. Anyone who can setup letsencrypt can also setup a DH group.
2017-04-22 00:28:43 +02:00
Tachibana waita
509793419d
add git fetch line to upgrade section ( #110 )
2017-04-20 20:06:21 +02:00
wxcafé
3c211890df
Fixes update section
2017-04-20 02:17:52 +02:00
Sergiusz Bazański
95a6040458
Mention yarn install in production upgrade guide ( #62 )
2017-04-19 18:44:07 +02:00
Matt Jankowski
4b67a3574b
Import from main repo README ( #82 )
...
* Add docker guide from main repo readme
* Add maintenance tasks doc to running section
* Clean up markdown in prod guide
* Move guidance to use tagged releases to docs
* Move local domain and host config to docs repo
* Title of page
* Update Production-guide.md
2017-04-18 16:32:47 +02:00
Florent Viel
1a82d42d76
fix typo ( #86 )
2017-04-18 16:14:20 +02:00
Erwan Leboucher
0b5cb11d08
Use the united command for daily task ( #81 )
...
commit of mastodon here e17f9d5e1a
2017-04-17 17:13:15 +02:00
Dolf RATTMANN
a893d018ba
Prevent people from pulling master in production ( #71 )
2017-04-17 00:32:34 +02:00
wxcafé
eb32fc9738
Specifies to run the latest tagged release
2017-04-16 16:14:31 +02:00
Edwin Torres
e743a88870
Fixed grammatical error and incorrect icon filename ( #45 )
...
* Fixed grammatical error. 'Setup' should be 'set up' in two places
* Fixed incorrect filename for Follow icon
2017-04-15 01:10:09 +02:00
James Moore
3cfacecb6c
moved things into alternatives.md
2017-04-14 15:53:38 -07:00
wxcafé
bdf7d53c9a
Merge pull request #29 from jemus42/patch-1
...
Add info about already set HTTP headers
2017-04-14 02:07:34 +02:00
wxcafé
6e431d26de
Removes duplicate HSTS directive
2017-04-14 02:03:03 +02:00
wxcafé
368d815e4d
Removes the includeSubDomains directive from HSTS
2017-04-14 02:00:01 +02:00
wxcafé
f2814435d5
Merge branch 'master' into patch-2
2017-04-14 01:56:54 +02:00
wxcafé
5bbee7f69e
Merge pull request #14 from datn/master
...
made pg_hba.conf addition with ident for Ubuntu 16.04
2017-04-14 01:53:07 +02:00
wxcafé
5c7a3ec16c
Merge pull request #12 from staticsafe/master
...
Use 127.0.0.1 instead of localhost in Sidekiq proxy_pass.
2017-04-14 01:50:51 +02:00
Lukas Burk
dae0d21d57
Add info about already set HTTP headers
...
Intended to avoid setting duplicate HTTP headers which will cause issues with tools like Mozilla Observatory many people use to evaluate an instance's security.
2017-04-13 19:37:33 +02:00
wxcafé
d960311faa
Merge pull request #23 from foozmeat/pr-cron
...
simplified the cronjob section
2017-04-13 19:30:43 +02:00
James Moore
b8cd7a99d4
removed weird dot characters
2017-04-13 10:28:57 -07:00
codl
0005b49faf
example nginx: remove includeSubDomains from hsts
2017-04-13 10:28:50 +02:00
James Moore
9c679e3741
simplified the cronjob section
2017-04-12 21:57:04 -07:00
Angristan
d92bd4544e
Add IPv6 for port 443
2017-04-12 16:07:26 +02:00
datn
98095b39bd
forgot to restart postgres; more exact match on sed
2017-04-11 22:11:43 -07:00
datn
e55c767f50
made pg_hba.conf addition with ident for Ubuntu 16.04
2017-04-11 22:00:57 -07:00
staticsafe
036c8fdb8c
Use 127.0.0.1 instead of localhost in Sidekiq proxy_pass.
...
Sidekiq only listens on v4 and using localhost will create
non-usable connections to ::1
2017-04-11 23:27:25 +00:00
Komic
d75e3d6087
Adding an Apache configuration example
...
(also added my instance)
2017-04-11 19:38:41 +02:00
Eugen Rochko
eebeee2b76
Up-to-date dump from main repository
2017-04-11 17:48:27 +02:00
Shel R
210477bfb2
Merge branch 'master' into patch-1
2017-04-07 22:59:07 -04:00
Eugen
b44df8f36c
Merge pull request #1191 from d3vgru/master
...
change suggested cipher for nginx
2017-04-07 23:02:49 +02:00
seekr
7123e2cb5a
typo
2017-04-07 16:33:13 -03:00
Ed Knutson
b130db887e
change suggested cipher for nginx
2017-04-07 14:10:39 -05:00
Vladimir Mincev
272d25c383
Update Production-guide.md
...
Under ## General dependencies:
apt-get needs sudo and install was typed wrongly.
2017-04-07 01:05:32 +02:00
Angristan
5d21f25944
Add git and curl as dependencies
...
In some VPS templates, they are not installed by default.
2017-04-05 14:11:08 +02:00
Angristan
781c555ef5
ECDH only
...
Disable DHE ciphers. We don't loose any compatibility as we already use TLS 1.2, and ECDH is faster and safer.
Also, it's better so specify the curve.
This is the conf I use here : https://tls.imirhil.fr/https/mstdn.io
2017-04-05 10:44:08 +02:00
Jason Snell
84b533490d
SSL best practices for nginx
2017-04-04 18:43:21 -07:00
Eugen
d1d2eb57b7
Merge pull request #885 from optikfluffel/patch-1
...
Update Production-guide.md
2017-04-05 03:24:08 +02:00
Eugen
48589d1ec3
Merge pull request #842 from Angristan/patch-2
...
Missing quotes
2017-04-05 03:08:24 +02:00
Eugen
865427092d
Merge pull request #854 from Angristan/patch-3
...
Fix crontab edit
2017-04-05 03:07:28 +02:00
Udo Kramer
38bc079678
Update Production-guide.md
2017-04-04 23:45:29 +02:00
Angristan
080caa0dff
Add file package
...
If the file package is not installed, we get "Validation failed: File has contents that are not what they are reported to be" when upload media.
2017-04-04 19:23:53 +02:00
Angristan
c4afe950bb
Fix crontab edit
...
Missing -u parameter to specify the mastodon user.
2017-04-04 17:23:56 +02:00
Angristan
5714143e53
Missing quotes
2017-04-04 15:57:37 +02:00
Eugen Rochko
5e91a1dfbd
Separate background jobs into different queues. ATTENTION: new queue "pull"
...
must be added to the Sidekiq invokation in your systemd file
The pull queue will handle link crawling, thread resolving, and OStatus
processing. Such tasks are more likely to hang for a longer time (due to
network requests) so it is more sensible to not make the "in-house" tasks
wait for them.
2017-04-04 00:53:20 +02:00
Valentin Lorentz
973a74d252
Also fix the start command.
2017-04-03 00:10:51 +02:00
