Rodrigo Campos [Mon, 27 Apr 2015 14:26:22 +0000 (11:26 -0300)]
Revert "templates/web.sssl.template.yml: Disable spdy header compression"
This reverts commit
c0ed494c3acf1acf629379f33f413d7660183855. It was late and I
misread the info here:
https://github.com/18F/tls-standards/issues/24
The first comment clearly states that the server *can* compress spdy header, as
the attack is on request headers (not responses). And modern browsers disable
compression on requests (or chrome, maybe even smarter tricks in newer
versions). In fact, Chrome 21 and Firefox 15 switched off SPDY header
compression[1] and the requirements page on discourse:
https://github.com/discourse/discourse#requirements
shows newer browsers than those are needed. So it seems safe to enable spdy
header compression on the server.
[1]: https://www.imperialviolet.org/2012/09/21/crime.html
rata [Tue, 21 Apr 2015 00:57:08 +0000 (21:57 -0300)]
templates/web.sssl.template.yml: Enable TLS session resumption
This is totally safe to enable, as the cache default is 5m, and should reduce CPU usage on the server
rata [Tue, 21 Apr 2015 00:43:45 +0000 (21:43 -0300)]
templates/web.sssl.template.yml: Disable spdy header compression
As explained here:
https://github.com/18F/tls-standards/issues/24
We shouldn't use spdy header compression with spdy 1.3 (the one packaged with nginx).So, just disable it.
Sam [Thu, 16 Apr 2015 02:54:27 +0000 (12:54 +1000)]
version bump
Sam [Thu, 16 Apr 2015 01:51:14 +0000 (11:51 +1000)]
update ruby 2.2 to latest
Sam [Thu, 16 Apr 2015 01:47:03 +0000 (11:47 +1000)]
version bump
Sam [Thu, 16 Apr 2015 01:30:57 +0000 (11:30 +1000)]
update ruby
Sam [Thu, 16 Apr 2015 01:30:37 +0000 (11:30 +1000)]
FIX: broken nginx log file rotation
Régis Hanol [Wed, 15 Apr 2015 09:30:39 +0000 (11:30 +0200)]
update pngout to latest version
Sam [Thu, 9 Apr 2015 01:51:53 +0000 (11:51 +1000)]
Merge pull request #144 from tgxworld/fix_readme
Update README.
Guo Xiang Tan [Thu, 9 Apr 2015 01:40:22 +0000 (09:40 +0800)]
Update README.
Follow up to https://github.com/discourse/discourse_docker/commit/
8b4382c7aa3a92440f292d7abdd4bce5b29ee405.
Sam [Wed, 8 Apr 2015 07:20:30 +0000 (17:20 +1000)]
oops
Sam [Wed, 8 Apr 2015 06:13:43 +0000 (16:13 +1000)]
add fast switch to build
Sam [Wed, 8 Apr 2015 05:06:53 +0000 (15:06 +1000)]
create an image for quickly switching ruby versions
Sam [Wed, 8 Apr 2015 03:00:35 +0000 (13:00 +1000)]
Merge pull request #143 from tgxworld/add_links_readme
Add documentation for links.
Guo Xiang Tan [Wed, 8 Apr 2015 02:52:28 +0000 (10:52 +0800)]
Add documentation for links.
Sam [Tue, 7 Apr 2015 03:39:55 +0000 (13:39 +1000)]
bump
Sam [Tue, 7 Apr 2015 02:22:25 +0000 (12:22 +1000)]
add ghostscript
Sam [Tue, 7 Apr 2015 01:29:34 +0000 (11:29 +1000)]
Add gsfonts needed for letter avatars
Sam [Mon, 6 Apr 2015 04:19:41 +0000 (14:19 +1000)]
Merge pull request #131 from Meeco/web_config_sample_typo
Change web_only sample database username variable to what discourse is expecting
Sam [Fri, 3 Apr 2015 23:23:55 +0000 (10:23 +1100)]
version bump
Sam [Fri, 3 Apr 2015 22:06:04 +0000 (09:06 +1100)]
new version of ruby new imagemagick
Sam [Wed, 1 Apr 2015 21:07:22 +0000 (08:07 +1100)]
add comments about shared buffer and db work mem
Robin Ward [Tue, 31 Mar 2015 18:54:31 +0000 (14:54 -0400)]
Merge pull request #132 from riking/socketed
Add web.socketed.template.yml for nginx sockets
Sam [Tue, 31 Mar 2015 05:18:41 +0000 (16:18 +1100)]
left over exit
Sam [Tue, 31 Mar 2015 05:18:16 +0000 (16:18 +1100)]
add warning if base image is missing
Sam [Mon, 30 Mar 2015 01:20:40 +0000 (12:20 +1100)]
Added a 2.2 image and updated test to use it
Sam [Mon, 23 Mar 2015 07:19:43 +0000 (18:19 +1100)]
Merge pull request #135 from tgxworld/allow_db_name_to_be_set_in_params
Allow database name and user to be set by params.
Guo Xiang Tan [Mon, 23 Mar 2015 07:12:33 +0000 (15:12 +0800)]
Allow database name and user to be set by params.
Régis Hanol [Thu, 19 Mar 2015 14:54:10 +0000 (15:54 +0100)]
Merge pull request #134 from tgxworld/typo
Fix type in README.
Guo Xiang Tan [Thu, 19 Mar 2015 14:28:10 +0000 (22:28 +0800)]
Fix type in README.
Sam [Thu, 19 Mar 2015 06:25:21 +0000 (17:25 +1100)]
Merge pull request #133 from tgxworld/fix_typo_in_readme
Fix typo.
Guo Xiang Tan [Thu, 19 Mar 2015 06:05:08 +0000 (14:05 +0800)]
Fix typo.
[CI SKIP]
Sam [Tue, 17 Mar 2015 06:04:50 +0000 (17:04 +1100)]
FIX: need a leading space here...
Sam [Mon, 16 Mar 2015 01:33:05 +0000 (12:33 +1100)]
we don't care about ssh these days
Sam [Mon, 16 Mar 2015 01:01:07 +0000 (12:01 +1100)]
- stop using cid files
- clean up cleanup command
- be more verbose when starting an image to ease debugging
riking [Fri, 13 Mar 2015 22:08:27 +0000 (15:08 -0700)]
Add web.socketed.template.yml for nginx sockets
Luke Fielke [Tue, 10 Mar 2015 23:23:14 +0000 (09:53 +1030)]
Change sample database username variable to what discourse is expecting
Sam [Tue, 10 Mar 2015 23:00:25 +0000 (10:00 +1100)]
Merge pull request #130 from audreyt/master
* Set default encoding to UTF8, not SQL_ASCII
Audrey Tang [Tue, 10 Mar 2015 07:42:06 +0000 (15:42 +0800)]
* Set default encoding to UTF8, not SQL_ASCII
This is a cleaned-up patch as suggested by @SamSaffron in #119.
Sam [Tue, 10 Mar 2015 04:49:53 +0000 (15:49 +1100)]
version bump
Sam [Tue, 10 Mar 2015 04:48:53 +0000 (15:48 +1100)]
clean up comments
Sam [Tue, 10 Mar 2015 04:48:05 +0000 (15:48 +1100)]
Merge branch 'master' of github.com:discourse/discourse_docker
Sam [Tue, 10 Mar 2015 04:47:55 +0000 (15:47 +1100)]
re-exec self if we are out of date
Sam [Tue, 10 Mar 2015 04:21:43 +0000 (15:21 +1100)]
fix pg missing dir
Sam [Tue, 10 Mar 2015 02:20:44 +0000 (13:20 +1100)]
some ignores
Sam [Tue, 10 Mar 2015 02:19:11 +0000 (13:19 +1100)]
Build script and bump up to version 1.0.8
Sam [Mon, 9 Mar 2015 23:31:50 +0000 (10:31 +1100)]
Merge pull request #72 from riking/notify-email
Add instructions to bootstrap with a notification email
Sam [Mon, 9 Mar 2015 23:31:22 +0000 (10:31 +1100)]
Merge pull request #89 from Supermathie/v1run
BUGFIX: if one of runit's 1.d scripts fails, abort the startup
Sam [Mon, 9 Mar 2015 23:28:28 +0000 (10:28 +1100)]
sample for start tls
Sam [Mon, 9 Mar 2015 23:26:32 +0000 (10:26 +1100)]
whois added to base image.
Sam [Mon, 9 Mar 2015 23:23:46 +0000 (10:23 +1100)]
Merge pull request #109 from fantasticfears/ref
add reference about rubygems china mirror in advanced section
Sam [Mon, 9 Mar 2015 23:17:53 +0000 (10:17 +1100)]
Merge pull request #126 from riking/patch-3
Add prompt when running on device mapper
Sam [Mon, 9 Mar 2015 22:59:36 +0000 (09:59 +1100)]
Merge pull request #128 from LuaTenshi/patch-1
Added cleanup command by Supermathie
LuaTenshi [Thu, 5 Mar 2015 23:47:33 +0000 (18:47 -0500)]
Confirm dialogue added, updated cleanup command
Added a confirm dialogue to the Cleanup Command, and the ability to show how much space was cleared after running the cleanup command.
LuaTenshi [Sun, 1 Mar 2015 05:24:45 +0000 (00:24 -0500)]
Added cleanup command by Supermathie
Added a the cleanup command to the launcher as suggested by Sam on https://meta.discourse.org/t/adding-an-easy-discourse-command/25841/2
The original code was written by Supermathie on https://meta.discourse.org/t/low-on-disk-space-cleaning-up-old-docker-containers/15792/18
Régis Hanol [Wed, 25 Feb 2015 13:20:31 +0000 (14:20 +0100)]
add gifsicle to base images
Sam [Sun, 22 Feb 2015 23:50:47 +0000 (10:50 +1100)]
Update web.template.yml
Sam [Mon, 16 Feb 2015 21:29:00 +0000 (08:29 +1100)]
Merge pull request #127 from kewubenduben/patch-1
Update launcher
Ker Ruben Ramos [Mon, 16 Feb 2015 20:57:32 +0000 (04:57 +0800)]
Update launcher
just a typo
Sam [Fri, 13 Feb 2015 06:53:38 +0000 (17:53 +1100)]
Added container for monitoring memory and cpu on all docker containers
riking [Mon, 9 Feb 2015 21:57:14 +0000 (13:57 -0800)]
Add prompt when running on device mapper
Sam [Mon, 9 Feb 2015 21:15:12 +0000 (08:15 +1100)]
Merge pull request #125 from riking/patch-1
Add Discourse locale to samples/standalone.yml
riking [Mon, 9 Feb 2015 19:19:37 +0000 (11:19 -0800)]
Add Discourse locale to samples/standalone.yml
Sam [Wed, 28 Jan 2015 05:25:46 +0000 (16:25 +1100)]
Merge pull request #122 from Supermathie/master
anacron: invoke directly instead of triggering the upstart job (which wo...
Michael Brown [Wed, 28 Jan 2015 03:52:32 +0000 (22:52 -0500)]
anacron: invoke directly instead of triggering the upstart job (which won't fire)
Sam [Tue, 6 Jan 2015 23:31:04 +0000 (10:31 +1100)]
Merge pull request #105 from SAMdroid-apps/docker-options
Add --docker-args option to the launcher script
Sam P [Sun, 9 Nov 2014 09:29:37 +0000 (04:29 -0500)]
Add --docker-args option to the launcher script
Sam [Mon, 15 Dec 2014 02:22:29 +0000 (13:22 +1100)]
bump version
Sam [Mon, 15 Dec 2014 02:21:39 +0000 (13:21 +1100)]
version bump
Sam [Sun, 14 Dec 2014 23:27:34 +0000 (10:27 +1100)]
FEATURE: Add nodejs and uglifyjs to the image
FEATURE: compile ruby with gcc 4.9
Sam [Thu, 11 Dec 2014 01:13:27 +0000 (12:13 +1100)]
remove rc4
Jeff Atwood [Fri, 12 Dec 2014 19:08:52 +0000 (11:08 -0800)]
Merge pull request #116 from qingxp9/master
fix /var/docker to /var/discourse
qingxp9 [Thu, 11 Dec 2014 11:18:44 +0000 (19:18 +0800)]
fix /var/docker to /var/discourse in describe
Sam [Thu, 11 Dec 2014 01:06:20 +0000 (12:06 +1100)]
Merge pull request #115 from axilleas/standalone_yml_typo
Fix typo in standalone.yml
Achilleas Pipinellis [Wed, 10 Dec 2014 22:49:54 +0000 (00:49 +0200)]
Fix typo in standalone.yml.
Sam [Mon, 8 Dec 2014 23:14:38 +0000 (10:14 +1100)]
Merge pull request #114 from Stealthii/hsts-nosub
Only use strict transport security for the discourse domain
Daniel Porter [Mon, 8 Dec 2014 14:09:42 +0000 (14:09 +0000)]
Only use strict transport security for the discourse domain
Sam [Wed, 3 Dec 2014 10:24:16 +0000 (21:24 +1100)]
Merge pull request #108 from fantasticfears/china
Fix missing indentation for china template
Sam [Thu, 20 Nov 2014 00:12:21 +0000 (11:12 +1100)]
Merge pull request #110 from dereckson/fix/tar
A few tar commands are verbose, other aren't.
Sam [Tue, 18 Nov 2014 22:25:39 +0000 (09:25 +1100)]
Merge pull request #111 from dereckson/fix/mac
Removed instruction relevant only for Mac OS X
Dereckson [Tue, 18 Nov 2014 16:06:37 +0000 (16:06 +0000)]
Removed instruction relevant only for Mac OS X
Dereckson [Tue, 18 Nov 2014 14:58:34 +0000 (14:58 +0000)]
Discard verbose output for tar commands
Erick Guan [Mon, 17 Nov 2014 16:29:19 +0000 (00:29 +0800)]
add reference about rubygems china mirror in advanced section
Erick Guan [Mon, 17 Nov 2014 16:19:27 +0000 (00:19 +0800)]
Fix missing indentation for china template.
Now the next problem is cdn used by gravatar was blocked by GFW. (FXXKING this gov)
Sam [Sun, 9 Nov 2014 22:22:31 +0000 (09:22 +1100)]
Merge pull request #104 from riking/ratelimit-429
Use 429 error code for nginx ratelimiting
Sam [Sun, 9 Nov 2014 21:35:51 +0000 (08:35 +1100)]
Merge pull request #106 from fantasticfears/china
add hook and a template to use chinese gem mirror site
Erick Guan [Sun, 9 Nov 2014 17:45:05 +0000 (01:45 +0800)]
add hook and a template to use chinese gem mirror site
riking [Fri, 7 Nov 2014 17:26:20 +0000 (09:26 -0800)]
Use 429 error code for nginx ratelimiting
Sam [Thu, 30 Oct 2014 02:03:59 +0000 (13:03 +1100)]
update base image
- change to NGINX mainline
- update phantomjs to 1.9.8
- update ruby 2.0 to p594
Sam [Tue, 21 Oct 2014 04:27:58 +0000 (15:27 +1100)]
double the rate limit
Sam [Mon, 20 Oct 2014 20:21:49 +0000 (07:21 +1100)]
fix regression which chmodded the file
Sam [Sun, 19 Oct 2014 23:45:29 +0000 (10:45 +1100)]
Merge pull request #100 from wmark/fix-launcher
launcher: Add more key types, and support CoreOS.
W-Mark Kubacki [Wed, 15 Oct 2014 11:52:30 +0000 (13:52 +0200)]
launcher: Check for ECDSA,
ED25519 keys for SSH as well as CoreOS' location.
W-Mark Kubacki [Wed, 15 Oct 2014 11:49:09 +0000 (13:49 +0200)]
launcher: Loop over possible SSH authorized key file locations.
That way we can easily add support for more key types or OS distributions.
W-Mark Kubacki [Wed, 15 Oct 2014 11:21:34 +0000 (13:21 +0200)]
launcher: Remove hard-coded paths to ip and ifconfig.
Either we are root and the tools are in our PATH, or they don't exist.
Sam [Tue, 14 Oct 2014 23:29:19 +0000 (10:29 +1100)]
add rate limiting by default to samples
Sam [Thu, 9 Oct 2014 08:10:31 +0000 (19:10 +1100)]
FIX: properly shut down services on "docker stop"
This protects against corrupt dbs and speeds up boot / bootstrap
Sam [Thu, 9 Oct 2014 02:13:47 +0000 (13:13 +1100)]
FIX: stop using su to daemonize stuff, we have no process to talk to
FIX: use fast shutdown for postgres
Sam [Wed, 8 Oct 2014 22:27:26 +0000 (09:27 +1100)]
Merge pull request #98 from axilleas/new_location_fix
README fixes