Thomas Lynch
ef35320e4f
INSTALLATION.md improvement close #383
...
note about possible location where to clone repo and put it earlier
note about apex domain and www
clarify that nginx config replacement must also occur in snippets
add loki and onions to example CSP snippets
add www. subdomain to example CSP snippets
add way to remove onion or lokinet from the CSP if not used
3 years ago
Thomas Lynch
61fd634ec5
stricter csp for video element, use media-src
3 years ago
Thomas Lynch
a64c17a037
add video thumbnails in frontend script, for supported types. otherwise fallback to "videothumbnail" image.
...
update csp for blob: canvas/video
close #220
3 years ago
Thomas Lynch
9f7b4a6d9d
force higher iq nginx configs, and improve readme about it
3 years ago
Thomas Lynch
cfae852971
use gulp-real-favicon
...
make favicons , files for safari, msfile, browserconfig, webmanifest, etc in gulp task
remove favicon2 so no exclamation mark favicon for now, until it can be incorporated
somehow. but the number like (x) is shown so it shouldnt matter.
maybe another commit can add a general "!" icon if somebody makes one
3 years ago
Thomas Lynch
d46ca5ade0
make csp always
...
for private backend, set the headers in the named block
remove the root and use /dev/null instead of $uri to call it
4 years ago
Thomas Lynch
1118ee3e4f
nginx fuckery, as usual
4 years ago
Thomas Lynch
4beb89bb22
improved nginx advanced and snippets config, less duplication for @backend and / (app) locations and added loki
4 years ago
Thomas Lynch
95397a45fd
add connect-src to content security policy, fixes websocket for browsers (actually just 1 browser, fucking SAFARI) that check it for websockets, because apparently it cant just use the 'self' from the default-src... f me
4 years ago
some random guy
b110dac7ba
support flac audio
4 years ago
Thomas Lynch
b7b3bfc740
comma missing in referrer policy header
4 years ago
Thomas Lynch
81e880dbb0
Make referrerpolicy a little less strict, so yt embeds will work closes #243
4 years ago
Thomas Lynch
a04d62d29e
Minor nginx config changes, fix the routes snippet and add a complete advanced example
4 years ago
Thomas Lynch
1399dda5fd
Json routes will hit backend & get 404'd there,
...
allows for pages with missing json that arent prebuilt to build when json route is hit,
without requiring html pageload first better for api
4 years ago
some random guy
9d947772d6
fix csp headers in nginx example configs for embedding
4 years ago
Thomas Lynch
14ce396c87
README improvement, nginx configs moved, nginx error pages fixed
4 years ago