Age | Commit message (Collapse) | Author |
|
Set max-age and secure flag for auth cookies
See merge request gitlab/gitlab-pages!16
|
|
|
|
|
|
We can't rely on r.TLS when pages are served behind proxy
So we save https flag to a context for later usage
Right now I'm trying to keep changes to a minimum since
I'm planning to backport this to older versions
That's why https flag is not refactored throughout the codebase
The alternative way would be to use gorilla's proxy headers
I'm planning to refactor to that version later
|
|
Encrypt cookies
See merge request gitlab/gitlab-pages!8
|
|
Generate signing and encryption secrets from one auth-secret using hkdf
|
|
|
|
For some reason pipeline passes on .com, but fails on dev.gitlab.com
This fixes the pipeline
|
|
Release v1.7.0
See merge request gitlab-org/gitlab-pages!156
|
|
|
|
feat: add sentry error reporting
Closes #174
See merge request gitlab-org/gitlab-pages!133
|
|
This reverts commit 27bd4d83cade6a721330e8583874e7c715bf3a26.
|
|
Release 1.6.1
See merge request gitlab-org/gitlab-pages!152
|
|
|
|
into 'master'
Resolve "Pages incorrectly serve acme-challenges with /index.html"
See merge request gitlab-org/gitlab-pages!151
|
|
|
|
Release v1.6.0
See merge request gitlab-org/gitlab-pages!149
|
|
|
|
Redirect unknown ACME challenges to the GitLab instance
This is alternative implementation of https://gitlab.com/gitlab-org/gitlab-pages/merge_requests/109/diffs as being discussed in https://gitlab.com/gitlab-org/gitlab-pages/issues/165#note_155998342
It redirects all requests to `.well-known/acme-challenge/*` to GitLab unless domain's project has requested acme challenge in place
Part of https://gitlab.com/gitlab-org/gitlab-ce/issues/28996
See merge request gitlab-org/gitlab-pages!141
|
|
|
|
Provide ability to disable old TLS versions
Closes #187
See merge request gitlab-org/gitlab-pages!146
|
|
Introduce two new configuration options -tls-min-version and
-tls-max-version to control which TLS versions will be supported by the
server. Accepted values are ssl3, tls1.0, tls1.1, tls1.2, and tls1.3.
Closing https://gitlab.com/gitlab-org/gitlab-pages/issues/187
|
|
Disable 3DES and other insecure cipher suites
Closes #150
See merge request gitlab-org/gitlab-pages!145
|
|
Supported cipher suites:
tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
Closes https://gitlab.com/gitlab-org/gitlab-pages/issues/150.
|
|
into 'master'
Update README with artifacts server caveats
See merge request gitlab-org/gitlab-pages!144
|
|
Be more explicit that running with `-daemon-inplace-chroot` will break
online view of HTML artifacts, add information how to disable it and
fall back to downloading.
Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/49475.
|
|
Update README for inplace chroot limitation
See merge request gitlab-org/gitlab-pages!143
|
|
|
|
Enable GitLab license management
See merge request gitlab-org/gitlab-pages!142
|
|
|
|
Prepare pages auth logs for production rollout
Closes #209
See merge request gitlab-org/gitlab-pages!138
|
|
Mostly escalate log levels
Add new logs and fields to existing logs
|
|
Use STDOUT for flag outputs
Closes #207
See merge request gitlab-org/gitlab-pages!132
|
|
|
|
Use proxy from environment for http requests
Closes #200
See merge request gitlab-org/gitlab-pages!131
|
|
|
|
'192-follow-up-from-pages-for-subgroups-refactor-access-control-tests' into 'master'
Resolve "Follow-up from "pages for subgroups" - refactor access control tests"
Closes #192
See merge request gitlab-org/gitlab-pages!129
|
|
|
|
Add tests for running on non standard ports
Closes #164
See merge request gitlab-org/gitlab-pages!128
|
|
|
|
|
|
Make extensionless URL working
Closes #95
See merge request gitlab-org/gitlab-pages!112
|
|
|
|
Release Pages v1.4.0
Closes #193
See merge request gitlab-org/gitlab-pages!127
|
|
|
|
pages for subgroups
Closes gitlab-ce#30548
See merge request gitlab-org/gitlab-pages!123
|
|
Make content-type detection consistent between file types
See merge request gitlab-org/gitlab-pages!126
|
|
|
|
Prevent wrong mimetype being set for GZipped files with unknown file extension
Closes #181
See merge request gitlab-org/gitlab-pages!122
|
|
|