docker-jitsi-meet

Author	SHA1	Message	Date
Cosmo Myzrail Gorynych aka CoMiGo	0b2514101c	web: Add ENABLE_HSTS flag to disable strict-transport-security header	4 years ago
Saúl Ibarra Corretgé	4cb181c1b2	web: install acme certs to persistent storage	4 years ago
Jonathan Lennox	b0cb4a1846	web: update TLS config to Mozilla security guidelines	4 years ago
Saúl Ibarra Corretgé	06012127e9	web: replace certbot with acme.sh The former seems to be in a pretty bad state for usage with Debian based containers: - The Debian provided package is too old - certbot-auto no longer works on Debian - The recommended way of using snap is not Docker friendly Thus, we are migrating to acme.sh, which has the advantage of also making the web container slimmer.	4 years ago
Jakub Onderka	2a0120de8b	web: set security headers also for non HTTPS Fixes: #493	4 years ago
Hanno Böck	dc46215600	web: remove DHE suites support Ref: https://github.com/jitsi/docker-jitsi-meet/issues/433	5 years ago
Saúl Ibarra Corretgé	30c425811e	misc: fix handling boolean values Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/30	6 years ago
netaskd	072fb9d9d1	web: add strong ssl_ciphers and headers	6 years ago
netaskd	7c6c6bcefb	web: enable ssl_protocol TLSv1.2 only	6 years ago
Saúl Ibarra Corretgé	f61ef3f093	web: add builtin Let's Encrypt support	6 years ago
Saúl Ibarra Corretgé	415f10406f	web: split TLS configuration and make it stronger Resources: - https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/ - https://weakdh.org/sysadmin.html	6 years ago