36 Commits (main)

Author	SHA1	Message	Date
Jeremy Kescher	5be3fb3d66	Merge remote-tracking branch 'essem/feature/emoji-reactions' into merge/emoji-reactions	4 months ago
gunchleoc	cb9f96036c	Add suggestion for secure cyphers to nginx.conf (#26349)	8 months ago
Eashwar Ranganathan	11f5a8e54b	Make mastodon-streaming systemd unit templated (#24751) ... Co-authored-by: Emelia Smith <ThisIsMissEm@users.noreply.github.com>	9 months ago
Local User	0527458f38	Merge branch 'upstream/main' into develop	10 months ago
Claire	fed9cbfd2b	Add hardened headers to user-uploaded files (#25756)	10 months ago
Jeremy Kescher	9eb149477a	Merge remote-tracking branch 'upstream/main' into develop	1 year ago
Emelia Smith	301e03eb8c	Remove clustering from streaming API (#24655)	1 year ago
Jeremy Kescher	68101baae1	Merge remote-tracking branch 'upstream/main' into develop ... # Conflicts: # app/controllers/settings/preferences_controller.rb # app/javascript/mastodon/utils/resize_image.js # app/lib/user_settings_decorator.rb # app/models/media_attachment.rb # app/models/user.rb # app/views/settings/preferences/appearance/show.html.haml # app/workers/scheduler/indexing_scheduler.rb # config/settings.yml # db/schema.rb	1 year ago
Eugen Rochko	9bda933740	Change media upload limits and remove client-side resizing (#23726)	1 year ago
Jeremy Kescher	0caa35c1f9	Apparently, the segfaults were not jemalloc's fault.	2 years ago
Jeremy Kescher	1eadfddbd2	Bump to v3.5.3+1.2.2	2 years ago
Jeremy Kescher	4886f1955b	Merge remote-tracking branch 'upstream/main' into develop	2 years ago
keiya	53817294fc	Fix nginx location matching (#20198)	2 years ago
Jeremy Kescher	ffa93fa157	Merge remote-tracking branch 'upstream/main' into develop	2 years ago
Rob Petti	8c81db5a41	allow /api/v1/streaming to be used as per documentation (#19896)	2 years ago
Jeremy Kescher	b127fa6d36	Assign lowest possible scheduling priorities to Sidekiq	2 years ago
Jeremy Kescher	06c090fda5	Redirect old /web links	2 years ago
Jeremy Kescher	7f6215984b	Merge remote-tracking branch 'upstream/main' into develop ... # Conflicts: # .github/workflows/build-image.yml	2 years ago
Jeremy Kescher	6067b452ae	Use mimalloc instead of jemalloc	2 years ago
Yurii Izorkin	a449ee8654	nginx: optimize locations (#19438) ... * nginx: optimize locations * nginx: don't use regex in locations * nginx: optimize Cache-Control headaers * nginx: use 404 error_page for missing static files * nginx: sort locations * nginx: add missing HSTS header	2 years ago
Shlee	c7bab3318e	Remove duplicate HSTS headers from nginx.conf (#19018) ... * Update nginx.conf * Update nginx.conf * Update nginx.conf	2 years ago
LinAGKar	48caeb9d65	Also compress SVG and ICO images in nginx (#17651)	2 years ago
Lerk	56c55ab9f6	Add ReadWritePaths directive to service files (#17178) ... * Update mastodon-web.service * Update mastodon-streaming.service * Update mastodon-sidekiq.service	2 years ago
Yurii Izorkin	a9ff5c8309	templates/systemd/mastodon: update sandbox mode (#16235) ... * templates/systemd/mastodon: add new sandboxing options * templates/systemd/mastodon: add '@privileged' and remove duplicates SystemCallFilters * templates/systemd/mastodon: add '@ipc' SystemCallFilter * templates/systemd/mastodon: add '@memlock' SystemCallFilter * templates/systemd/mastodon: allow '@resources' filter to mastodon-web service	3 years ago
Peter Dave Hello	a2afcac7d9	Make sure nginx always send HSTS header (#16633) ... By default, it'll only send those headers when the response code is one of the following: - 200, 201, 204, 206, 301, 302, 303, 304, 307 & 308 As all the traffics should be https, the http protocol only exists to do 301 redirect, and always send the HSTS header is almost one of the best practices, we should set nginx to do so. Reference: - https://nginx.org/en/docs/http/ngx_http_headers_module.html#add_header - https://ssl-config.mozilla.org/	3 years ago
Peter Dave Hello	e03dc3956f	Disable nginx ssl_session_tickets for better security (#16632) ... It's default turned on, but it's better to turn it off for security reason. Reference: - https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_tickets - https://github.com/mozilla/server-side-tls/issues/135	3 years ago
Akihiko Odaki	8af7f3b063	Preload libjemalloc.so for long-running Ruby (#16462) ... Always mark jemalloc needed if jemalloc is enabled by akihikodaki · Pull Request #4627 · ruby/ruby https://github.com/ruby/ruby/pull/4627 > Symbols exported by jemalloc is referred by the shared library but not > by the executables when building Ruby as a shared library with > jemalloc. It causes shared libraries such as the GNU C++ library > occasionally rely on the memory allocator provided by the standard C > library. Worse, the resolved symbols can later be replaced with > jemalloc, and jemalloc may see pointers from the standard C library, > which results in various failures. > e.g. https://github.com/tootsuite/mastodon/issues/15751 As a workaround, do not rely on jemalloc enablement of Ruby, and preload libjemalloc.so instead.	3 years ago
Yurii Izorkin	7da104eb11	templates/systemd/mastodon: optimize SystemCallFilters (#16127)	3 years ago
Yurii Izorkin	863ae47b51	templates/systemd/mastodon: update sandbox mode (#16103)	3 years ago
Yurii Izorkin	297a3cf904	templates/systemd/mastodon: enable sandbox mode (#15937)	3 years ago
Cecylia Bocovich	38bc4b9562	Set X-Forwarded-Proto to request scheme (#15310) (#15498) ... This fixes a bug that prevents logins to mastodon onion services. The nginx directive assumed all requests were made over https, causing a domain mismatch for onion services that have https redirects disabled. The fix more correctly sets X-Forwarded-Proto to the actual scheme used in the request.	3 years ago
Shlee	514cd874a7	Update nginx.conf (#13066)	4 years ago
ichi_i	49f57b5534	Add TLS v1.3 support (#11603) ... Maintain TLS v1.2 compatibility (might want to drop this later) and add support for TLS v1.3	5 years ago
Eugen Rochko	b7379da6cc	Cache error 410 responses in recommended nginx configuration (#10425)	5 years ago
Nolan Lawson	658b4621a6	perf: run node directly when streaming (#10032)	5 years ago
Eugen Rochko	6465972caf	Add nginx and systemd templates (#8770) ... So they can be copied during installation instead of looking them up in the documentation Make default sidekiq configuration use weighted queues Remove deprecated docs directory	6 years ago