Skip to content

Conversation

joshbuddy
Copy link
Contributor

No description provided.

joshbuddy and others added 5 commits January 25, 2023 21:06
esmil:
- disable access log and log errors to syslog (journal really)
  use journalctl -u nginx to see the errors
- hoist some configuration values into ansible variables
- add tags and use a handler to reload nginx on configuration changes
- make nginx do its DNS queries against our local resolved
  this enables nginx to use DNSSEC and DoT
- don't start nginx before the network is up. if it can't do
  dns lookups ssl_stapling will be ignored
esmil:
- don't install cron job, just use the packaged timer
- install deploy hook to reload nginx when certificates are updated
esmil:
- use timer to update the homepage
- git clone, update and install gems as the homepage user
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants