Daniel Winzen
|
9b21826620
|
Due to running other than web services, we can't make use of the proxy protocol on the main onion
|
2021-10-12 08:29:01 +02:00 |
|
Daniel Winzen
|
9a1be9590c
|
Make use of HiddenServiceExportCircuitID
|
2021-10-09 12:56:46 +02:00 |
|
Daniel Winzen
|
e382b150a6
|
Compress more common mime types
|
2021-10-08 23:15:33 +02:00 |
|
Daniel Winzen
|
4f4f69e11a
|
More networking tweaks
|
2021-10-07 08:28:31 +02:00 |
|
Daniel Winzen
|
0916b74bd3
|
network optimization
|
2021-10-06 21:05:26 +02:00 |
|
Daniel Winzen
|
b7cf9da137
|
Disable hostname information in bind9
|
2021-10-01 23:13:41 +02:00 |
|
Daniel Winzen
|
9ddb93d3a0
|
Disable version information in bind9
|
2021-10-01 22:54:35 +02:00 |
|
Daniel Winzen
|
89669299e9
|
Add bind onion zone config
|
2021-10-01 22:37:42 +02:00 |
|
Daniel Winzen
|
8d5ded3bf6
|
remove unnecessary dnsmasq proxy between bind9/tor
|
2021-10-01 22:34:35 +02:00 |
|
Daniel Winzen
|
2bcf3c5b6b
|
Font files should be cached
|
2021-09-25 16:35:46 +02:00 |
|
Daniel Winzen
|
14b0e475e9
|
Add missing nat table returns
|
2021-08-13 21:29:00 +02:00 |
|
Daniel Winzen
|
23b5514989
|
Remove deprecated option innodb_buffer_pool_instances
|
2021-07-11 18:08:51 +02:00 |
|
Daniel Winzen
|
d61ece9818
|
Fix redirection happening too soon for non-hosting user traffic
|
2021-05-23 16:00:10 +02:00 |
|
Daniel Winzen
|
4ebebf6be5
|
Fix IPv6 SLAAC
|
2021-05-23 15:17:26 +02:00 |
|
Daniel Winzen
|
f94c0b6b71
|
Add razorfy and bind config
|
2021-05-21 18:58:45 +02:00 |
|
Daniel Winzen
|
a6fbf2423d
|
User is bind not bind9
|
2021-05-21 18:07:11 +02:00 |
|
Daniel Winzen
|
3d96c2ca70
|
Add dnssec validating recursive resolver and razorfy+rspamd users
|
2021-05-21 08:47:56 +02:00 |
|
Daniel Winzen
|
5e7f385b06
|
Recurse pull php-gnupg submodules and remove unneeded systemd.service files
|
2021-04-08 18:31:02 +02:00 |
|
Daniel Winzen
|
6f98c1b08b
|
Add PHP-8.0 and remove xmlrpc extension + PHP-7.2
|
2020-10-13 10:25:04 +02:00 |
|
Daniel Winzen
|
3b7818c738
|
disable auth penalty as everyone connects from the same IP
|
2020-08-04 21:48:07 +02:00 |
|
Daniel Winzen
|
af0d5cf26a
|
Remove FTP support - SFTP is the future
|
2020-07-19 18:03:07 +02:00 |
|
Daniel Winzen
|
825a2967e2
|
Build custom libssh2 and enable hmac-sha2-512 as best matching MAC
|
2020-07-19 13:33:53 +02:00 |
|
Daniel Winzen
|
20759103b0
|
Add nginx lua module form openresty
|
2020-07-05 22:51:49 +02:00 |
|
Daniel Winzen
|
6cd3146b29
|
Add $request_method to nginx cache key
|
2020-02-08 22:53:33 +01:00 |
|
Daniel Winzen
|
14c50d7c1e
|
Allow nginx to write in postfix directory
|
2020-02-08 22:37:57 +01:00 |
|
Daniel Winzen
|
1549b7cc09
|
vfemail.net took down their .onion server...
|
2020-02-07 20:10:26 +01:00 |
|
Daniel Winzen
|
1b28fcac95
|
Fix vsftpd not starting
|
2020-02-05 19:26:35 +01:00 |
|
Daniel Winzen
|
05cd5b0774
|
Rotate all php version logs
|
2020-02-05 17:59:34 +01:00 |
|
Daniel Winzen
|
29b06199e6
|
Removed unused saslauthd config
|
2020-01-19 10:28:17 +01:00 |
|
Daniel Winzen
|
739216f853
|
Tweaked nginx ressource limits
|
2020-01-16 06:22:35 +01:00 |
|
Daniel Winzen
|
24692da470
|
Fixed cache injection vulnerability using faked headers
|
2020-01-14 06:45:56 +01:00 |
|
Daniel Winzen
|
68b4458c88
|
Improve inode/dnode caching under memory pressure
|
2020-01-13 06:53:22 +01:00 |
|
Daniel Winzen
|
e9c4b798d5
|
Update php systemd service files
|
2020-01-11 13:33:34 +01:00 |
|
Daniel Winzen
|
a69714bce8
|
Enable hidden service intro DoS defense
|
2020-01-11 12:56:20 +01:00 |
|
Daniel Winzen
|
709e4fd1c5
|
Reduce priority of background deletion task
|
2020-01-08 06:32:40 +01:00 |
|
Daniel Winzen
|
930052fe1e
|
BindPaths -> ReadWritePaths for all systemd services
|
2020-01-05 19:31:52 +01:00 |
|
Daniel Winzen
|
6d92ea99e0
|
Inreased mysql max_connections variable
|
2020-01-05 14:02:38 +01:00 |
|
Daniel Winzen
|
0b41932570
|
Use Dovecot SASL instead of running a seperate saslauthd
|
2019-12-16 22:25:30 +01:00 |
|
Daniel Winzen
|
1f4c90edf7
|
image/x-icon (.ico files) can be compressed well
|
2019-11-10 20:55:54 +01:00 |
|
Daniel Winzen
|
f857083765
|
Enable HPACK nginx module and aio
|
2019-11-01 20:45:21 +01:00 |
|
Daniel Winzen
|
079b771717
|
Define disable_symlinks nginx config rule globally
|
2019-10-20 13:17:08 +02:00 |
|
Daniel Winzen
|
724ef98c9b
|
prevent deleting sockets of other php instances
|
2019-10-19 20:46:18 +02:00 |
|
Daniel Winzen
|
9c04243f33
|
Simplify nginx systemd unit and add RuntimeDirectory option to php
|
2019-10-17 19:03:45 +02:00 |
|
Daniel Winzen
|
b7be96b11f
|
Enable nginx and fix systemd service
|
2019-10-16 21:29:55 +02:00 |
|
Daniel Winzen
|
6052e57112
|
Switch to custom compiled php
|
2019-10-15 19:37:51 +02:00 |
|
Daniel Winzen
|
f9824e45a8
|
We run less instances now for less memory usage
|
2019-09-22 22:17:11 +02:00 |
|
Daniel Winzen
|
7ec0f76f35
|
Updated nginx logrotate
|
2019-09-07 12:21:00 +02:00 |
|
Daniel Winzen
|
0b61a38c26
|
Replace debian stock nginx with custom optimized nginx
|
2019-09-02 19:49:41 +02:00 |
|
Daniel Winzen
|
df4c4275c7
|
Added vm.overcommit_ratio=100 to sysctl to use full memory capacity
|
2019-08-30 20:19:43 +02:00 |
|
Daniel Winzen
|
37cf037a6c
|
Added the new instances to rc.local and README
|
2019-07-21 12:43:56 +02:00 |
|