17 Commits

Author	SHA1	Message	Date
Alan Orth	a38d822fad	roles/nginx: Only run Let's Encrypt checks once a day ... I can't remember where I had seen it recommended to be twice a day, but it seems overkill.	2016-07-08 13:50:11 +03:00
Alan Orth	b2e2d7bb9e	roles/nginx: Better names for Let's Encrypt timer/service	2016-07-07 14:36:29 +03:00
Alan Orth	0cd2735c82	roles/nginx: Rework Let's Encrypt stuff ... Take an opinionated stance on HTTPS and assume that hosts are using HTTPS for all vhosts. This can either be via custom TLS cert/key pairs defined in the host's variables (could even be self-signed certificates on dev boxes) or via Let's Encrypt.	2016-06-27 23:52:39 +03:00
Alan Orth	fe6c733cae	roles/nginx: Turn on tcp_nopush in nginx.conf ... It seems tcp_nopush is meant to be used with sendfile in newer versions of nginx. See: https://github.com/h5bp/server-configs-nginx/blob/master/nginx.conf See: https://t37.net/nginx-optimization-understanding-sendfile-tcp_nodelay-and-tcp_nopush.html Signed-off-by: Alan Orth <alan.orth@gmail.com>	2016-03-14 00:07:35 +02:00
Alan Orth	250b196bf8	roles/nginx: Add comment for sendfile option ... From: https://github.com/h5bp/server-configs-nginx/blob/master/nginx.conf Signed-off-by: Alan Orth <alan.orth@gmail.com>	2016-03-12 19:27:56 +02:00
Alan Orth	89bee2e6db	roles/nginx: Add comment for gzip_vary ... From: https://github.com/h5bp/server-configs-nginx/blob/master/nginx.conf Signed-off-by: Alan Orth <alan.orth@gmail.com>	2016-03-12 19:25:57 +02:00
Alan Orth	c6cc1f57bb	roles/nginx: Add image/svg+xml to gzip types ... Google's PageSpeed Insights tool pointed out that the Genericons in WordPress' Jetpack module could be compressed. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2016-03-12 19:16:23 +02:00
Alan Orth	926cdf58cf	roles/nginx: keepalive_timeout is in seconds ... See: http://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_timeout Signed-off-by: Alan Orth <alan.orth@gmail.com>	2016-03-12 19:02:57 +02:00
Alan Orth	3dcc5e1411	roles/nginx: Move some common fastcgi settings out of vhost template ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-03-10 11:59:43 +03:00
Alan Orth	2b02d94254	roles/nginx: Don't cache 404 errors in munin config ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-03-09 13:32:09 +03:00
Alan Orth	41f055306f	roles/nginx: Re-order $request_method in fastcgi_cache_key ... Everyone else on the Internet has it this way, so why not. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-03-09 13:18:02 +03:00
Alan Orth	066bf6fa85	roles/nginx: Set gzip_comp_level to 6 ... Seems to be the sweet spot, as gzip itself defaults to this. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-03-09 10:21:34 +03:00
Alan Orth	bb92bd080d	roles/nginx: Add $request_method to nginx fastcgi_cache_key ... nginx is caching HEAD requests, then when users come along and do a GET request they get an HTTP 200 with no request body. It seems setting fastcgi_request_methods to GET doesn't stop nginx from caching HEADs, so for now just add the $request_method to the key. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-03-09 10:19:34 +03:00
Alan Orth	0b90bad6a9	roles/nginx: Add fastcgi caching ... Bypasses caching for logged in users (right now only for sessions where the "wordpress_logged_in" cookie is set. Doubles the trans- actions per second as measured by siege: $ siege -d1 -t1M -c50 https://mjanja.ch Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-02-10 23:04:28 +03:00
Alan Orth	4ea152bf51	roles/nginx: Add HTTP headers for web application security ... See: https://github.com/h5bp/server-configs-nginx/blob/master/h5bp/directive-only/extra-security.conf See: https://www.owasp.org/index.php/List_of_useful_HTTP_headers Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-01-24 13:05:42 +03:00
Alan Orth	fd9c6f31cb	roles/nginx: Add index to munin vhost ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2014-10-05 15:47:14 +03:00
Alan Orth	60b8ecdd4c	Initial commit ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2014-08-17 00:35:57 +03:00