Guillaume Vincent
9d7e84b27d
Fix lesspass.com HSTS preload status error
Fixes #671
3 years ago
Guillaume Vincent
0881e15c27
Fix HTTP and HTTPS configuration
3 years ago
Guillaume Vincent
ec9ab2063c
Redirect lesspass.com to www.lesspass.com
Co-authored-by: William Entriken <github.com@phor.net>
3 years ago
Guillaume Vincent
3168380ff0
edit hsts configuration
The header must contain the `includeSubDomains` directive.
The header must contain the `preload` directive.
3 years ago
Guillaume Vincent
cfed362a77
Use less restrictive TLS configuration
Until the day TLS 1.3 becomes widely supported, web servers must rely on a fallback to TLS 1.2 with correctly configured server directives and strong cipher suites.
* https://www.cloudinsidr.com/content/tls-1-3-and-tls-1-2-cipher-suites-demystified-how-to-pick-your-ciphers-wisely/
* (fr) https://www.ssi.gouv.fr/guide/recommandations-de-securite-relatives-a-tls/
* https://ssl-config.mozilla.org/#server=apache&version=2.4.41&config=intermediate&openssl=1.1.1d&guideline=5.6
4 years ago
Peter Dave Hello
96af69af3b
Ensure final newline char in text files, following .editorconfig ( #575 )
4 years ago
Peter Dave Hello
7ce7be6451
Remove trailing spaces in text files, following .editorconfig ( #573 )
4 years ago
Guillaume Vincent
4bb32d9664
Use modern ssl configuration and fix HSTS
4 years ago
Peter Dave Hello
0a824a9748
Minimize Apache ServerTokens for lesspass-site, cc #568 ( #571 )
4 years ago
Peter Dave Hello
2a7c018dc9
Enable Apache OCSP stapling ( #569 )
This will speed up the website loading, and make the website more
reliable to the users when the client fails to connect to the CA for an
OCSP response.
Reference:
- https://en.wikipedia.org/wiki/OCSP_stapling
4 years ago
Peter Dave Hello
cc7bac7c9b
Enable Apache HTTP/2 for better performance ( #570 )
4 years ago
Guillaume Vincent
876c0edcc9
Set X-Frame-Options header to deny
4 years ago
Guillaume Vincent
ee30d0528c
Fix preflight CORS redirect issue
4 years ago
Guillaume Vincent
5d1aa73633
Fix proxy pass for old requests
4 years ago
Guillaume Vincent
c8361afd73
Update Dockerfile
4 years ago
Guillaume Vincent
e063e38355
wip refactor containers
4 years ago
Guillaume Vincent
0881a8d132
Move LessPass web site in containers folder
5 years ago
Guillaume Vincent
407668671c
Improve containers
5 years ago
Guillaume Vincent
fe9ce4f252
Construct container with based images compatible with ARM
Fixes: https://github.com/lesspass/lesspass/issues/371
5 years ago
Guillaume Vincent
29156429af
Move from EPEL to SCL and upgrade python to 3.6
5 years ago
Guillaume Vincent
4222a40af0
Reactivate continuous integration
5 years ago
Guillaume Vincent
49b31f9777
LessPass backend container work
5 years ago
Guillaume Vincent
d7a086e063
Move container folders for easy change directory
6 years ago