Age | Commit message (Collapse) | Author |
|
esmil:
- use timer to update the homepage
- git clone/update and install gems as the homepage user
|
|
esmil:
- don't install cron job, just use the packaged timer
- install deploy hook to reload nginx when certificates are updated
|
|
|
|
esmil:
- disable access log and log errors to syslog (journal really)
use journalctl -u nginx to see the errors
- hoist some configuration values into ansible variables
- add tags and use a handler to reload nginx on configuration changes
- make nginx do its DNS queries against our local resolved
this enables nginx to use DNSSEC and DoT
- don't start nginx before the network is up. if it can't do
dns lookups ssl_stapling will be ignored
|