diff options
Diffstat (limited to 'roles/git/files/etc')
| -rw-r--r-- | roles/git/files/etc/nginx/sites-available/git | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/roles/git/files/etc/nginx/sites-available/git b/roles/git/files/etc/nginx/sites-available/git index 0aa4345..3f2bc7f 100644 --- a/roles/git/files/etc/nginx/sites-available/git +++ b/roles/git/files/etc/nginx/sites-available/git @@ -22,40 +22,41 @@ server { server_name git.fripost.org; access_log /var/log/nginx/git.access.log; error_log /var/log/nginx/git.error.log info; include snippets/headers.conf; add_header Content-Security-Policy "default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'"; include snippets/ssl.conf; ssl_certificate ssl/git.fripost.org.pem; ssl_certificate_key ssl/git.fripost.org.key; include snippets/git.fripost.org.hpkp-hdr; gzip on; gzip_vary on; gzip_min_length 256; gzip_types application/javascript application/json application/xml image/svg+xml image/x-icon text/css text/plain; location ^~ /static/ { + expires 30d; alias /usr/share/cgit/; } # disallow push over HTTP/HTTPS location ~ "^/.+/git-receive-pack$" { return 403; } location ~ "^/.+/(?:info/refs|git-upload-pack)$" { limit_except GET POST { deny all; } fastcgi_buffering off; gzip off; fastcgi_param SCRIPT_FILENAME /usr/lib/git-core/git-http-backend; fastcgi_param NO_BUFFERING ""; # cf. git-http-backend(1) fastcgi_param GIT_PROJECT_ROOT /var/lib/gitolite/repositories; fastcgi_param PATH_INFO $uri; fastcgi_param CONTENT_TYPE $content_type; fastcgi_param QUERY_STRING $query_string; fastcgi_param REQUEST_METHOD $request_method; |