Bob Mottram преди 7 години
родител
ревизия
24f58201cd

+ 4
- 4
src/freedombone-app-akaunting Целия файл

372
         function_check nginx_ssl
372
         function_check nginx_ssl
373
         nginx_ssl "$AKAUNTING_DOMAIN_NAME"
373
         nginx_ssl "$AKAUNTING_DOMAIN_NAME"
374
 
374
 
375
-        function_check nginx_disable_sniffing
376
-        nginx_disable_sniffing "$AKAUNTING_DOMAIN_NAME"
375
+        function_check nginx_security_options
376
+        nginx_security_options "$AKAUNTING_DOMAIN_NAME"
377
 
377
 
378
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
378
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
379
           echo '';
379
           echo '';
415
       function_check nginx_compress
415
       function_check nginx_compress
416
     nginx_compress "$AKAUNTING_DOMAIN_NAME"
416
     nginx_compress "$AKAUNTING_DOMAIN_NAME"
417
     echo '' >> "$akaunting_nginx_site"
417
     echo '' >> "$akaunting_nginx_site"
418
-    function_check nginx_disable_sniffing
419
-    nginx_disable_sniffing "$AKAUNTING_DOMAIN_NAME"
418
+    function_check nginx_security_options
419
+    nginx_security_options "$AKAUNTING_DOMAIN_NAME"
420
     { echo '';
420
     { echo '';
421
       echo '  access_log /dev/null;';
421
       echo '  access_log /dev/null;';
422
       echo '  error_log /dev/null;';
422
       echo '  error_log /dev/null;';

+ 4
- 4
src/freedombone-app-dokuwiki Целия файл

380
           echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
380
           echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
381
         function_check nginx_ssl
381
         function_check nginx_ssl
382
         nginx_ssl "$DOKUWIKI_DOMAIN_NAME"
382
         nginx_ssl "$DOKUWIKI_DOMAIN_NAME"
383
-        function_check nginx_disable_sniffing
384
-        nginx_disable_sniffing "$DOKUWIKI_DOMAIN_NAME"
383
+        function_check nginx_security_options
384
+        nginx_security_options "$DOKUWIKI_DOMAIN_NAME"
385
         { echo '    add_header Strict-Transport-Security "max-age=0;";';
385
         { echo '    add_header Strict-Transport-Security "max-age=0;";';
386
           echo '';
386
           echo '';
387
           echo '    # rewrite to front controller as default rule';
387
           echo '    # rewrite to front controller as default rule';
458
       echo '    index index.php;';
458
       echo '    index index.php;';
459
       echo '    charset utf-8;';
459
       echo '    charset utf-8;';
460
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
460
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$DOKUWIKI_DOMAIN_NAME"
461
-    function_check nginx_disable_sniffing
462
-    nginx_disable_sniffing "$DOKUWIKI_DOMAIN_NAME"
461
+    function_check nginx_security_options
462
+    nginx_security_options "$DOKUWIKI_DOMAIN_NAME"
463
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
463
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
464
       echo '';
464
       echo '';
465
       echo '    # rewrite to front controller as default rule';
465
       echo '    # rewrite to front controller as default rule';

+ 4
- 4
src/freedombone-app-edith Целия файл

341
         function_check nginx_ssl
341
         function_check nginx_ssl
342
         nginx_ssl "$EDITH_DOMAIN_NAME"
342
         nginx_ssl "$EDITH_DOMAIN_NAME"
343
 
343
 
344
-        function_check nginx_disable_sniffing
345
-        nginx_disable_sniffing "$EDITH_DOMAIN_NAME"
344
+        function_check nginx_security_options
345
+        nginx_security_options "$EDITH_DOMAIN_NAME"
346
 
346
 
347
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
347
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
348
           echo '';
348
           echo '';
379
     function_check nginx_compress
379
     function_check nginx_compress
380
     nginx_compress "$EDITH_DOMAIN_NAME"
380
     nginx_compress "$EDITH_DOMAIN_NAME"
381
     echo '' >> "$edith_nginx_site"
381
     echo '' >> "$edith_nginx_site"
382
-    function_check nginx_disable_sniffing
383
-    nginx_disable_sniffing "$EDITH_DOMAIN_NAME"
382
+    function_check nginx_security_options
383
+    nginx_security_options "$EDITH_DOMAIN_NAME"
384
     { echo '';
384
     { echo '';
385
       echo '  access_log /dev/null;';
385
       echo '  access_log /dev/null;';
386
       echo '  error_log /dev/null;';
386
       echo '  error_log /dev/null;';

+ 4
- 4
src/freedombone-app-etherpad Целия файл

557
         function_check nginx_ssl
557
         function_check nginx_ssl
558
         nginx_ssl "$ETHERPAD_DOMAIN_NAME"
558
         nginx_ssl "$ETHERPAD_DOMAIN_NAME"
559
 
559
 
560
-        function_check nginx_disable_sniffing
561
-        nginx_disable_sniffing "$ETHERPAD_DOMAIN_NAME"
560
+        function_check nginx_security_options
561
+        nginx_security_options "$ETHERPAD_DOMAIN_NAME"
562
 
562
 
563
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
563
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
564
         echo '';
564
         echo '';
584
       echo "    listen 127.0.0.1:$ETHERPAD_ONION_PORT default_server;";
584
       echo "    listen 127.0.0.1:$ETHERPAD_ONION_PORT default_server;";
585
       echo "    server_name $ETHERPAD_ONION_HOSTNAME;";
585
       echo "    server_name $ETHERPAD_ONION_HOSTNAME;";
586
       echo ''; } >> "$etherpad_nginx_site"
586
       echo ''; } >> "$etherpad_nginx_site"
587
-    function_check nginx_disable_sniffing
588
-    nginx_disable_sniffing "$ETHERPAD_DOMAIN_NAME"
587
+    function_check nginx_security_options
588
+    nginx_security_options "$ETHERPAD_DOMAIN_NAME"
589
     { echo '';
589
     { echo '';
590
       echo '  # Logs';
590
       echo '  # Logs';
591
       echo '  access_log /dev/null;';
591
       echo '  access_log /dev/null;';

+ 4
- 4
src/freedombone-app-friendica Целия файл

419
           echo '    access_log /dev/null;'; } >> "/etc/nginx/sites-available/$FRIENDICA_DOMAIN_NAME"
419
           echo '    access_log /dev/null;'; } >> "/etc/nginx/sites-available/$FRIENDICA_DOMAIN_NAME"
420
         function_check nginx_ssl
420
         function_check nginx_ssl
421
         nginx_ssl "$FRIENDICA_DOMAIN_NAME"
421
         nginx_ssl "$FRIENDICA_DOMAIN_NAME"
422
-        function_check nginx_disable_sniffing
423
-        nginx_disable_sniffing "$FRIENDICA_DOMAIN_NAME"
422
+        function_check nginx_security_options
423
+        nginx_security_options "$FRIENDICA_DOMAIN_NAME"
424
         { echo '    add_header Strict-Transport-Security max-age=15768000;';
424
         { echo '    add_header Strict-Transport-Security max-age=15768000;';
425
           echo '';
425
           echo '';
426
           echo '    # rewrite to front controller as default rule';
426
           echo '    # rewrite to front controller as default rule';
493
           echo '    # rewrite to front controller as default rule';
493
           echo '    # rewrite to front controller as default rule';
494
           echo '    location / {'; } > "/etc/nginx/sites-available/$FRIENDICA_DOMAIN_NAME"
494
           echo '    location / {'; } > "/etc/nginx/sites-available/$FRIENDICA_DOMAIN_NAME"
495
         nginx_limits "$FRIENDICA_DOMAIN_NAME"
495
         nginx_limits "$FRIENDICA_DOMAIN_NAME"
496
-        nginx_disable_sniffing "$FRIENDICA_DOMAIN_NAME"
496
+        nginx_security_options "$FRIENDICA_DOMAIN_NAME"
497
         { echo "        rewrite ^/(.*) /index.php?q=\$uri&\$args last;";
497
         { echo "        rewrite ^/(.*) /index.php?q=\$uri&\$args last;";
498
           echo '    }';
498
           echo '    }';
499
           echo '';
499
           echo '';
515
           echo '    # or a unix socket';
515
           echo '    # or a unix socket';
516
           echo '    location ~* \.php$ {'; } >> "/etc/nginx/sites-available/$FRIENDICA_DOMAIN_NAME"
516
           echo '    location ~* \.php$ {'; } >> "/etc/nginx/sites-available/$FRIENDICA_DOMAIN_NAME"
517
         nginx_limits "$FRIENDICA_DOMAIN_NAME"
517
         nginx_limits "$FRIENDICA_DOMAIN_NAME"
518
-        nginx_disable_sniffing "$FRIENDICA_DOMAIN_NAME"
518
+        nginx_security_options "$FRIENDICA_DOMAIN_NAME"
519
         { echo '        # Zero-day exploit defense.';
519
         { echo '        # Zero-day exploit defense.';
520
           echo '        # http://forum.nginx.org/read.php?2,88845,page=3';
520
           echo '        # http://forum.nginx.org/read.php?2,88845,page=3';
521
           echo "        # Won't work properly (404 error) if the file is not stored on this";
521
           echo "        # Won't work properly (404 error) if the file is not stored on this";

+ 4
- 4
src/freedombone-app-ghost Целия файл

518
           echo ''; } >> "/etc/nginx/sites-available/${GHOST_DOMAIN_NAME}"
518
           echo ''; } >> "/etc/nginx/sites-available/${GHOST_DOMAIN_NAME}"
519
         function_check nginx_ssl
519
         function_check nginx_ssl
520
         nginx_ssl "${GHOST_DOMAIN_NAME}"
520
         nginx_ssl "${GHOST_DOMAIN_NAME}"
521
-        function_check nginx_disable_sniffing
522
-        nginx_disable_sniffing "${GHOST_DOMAIN_NAME}"
521
+        function_check nginx_security_options
522
+        nginx_security_options "${GHOST_DOMAIN_NAME}"
523
         { echo '    add_header Strict-Transport-Security max-age=0;';
523
         { echo '    add_header Strict-Transport-Security max-age=0;';
524
           echo '';
524
           echo '';
525
           echo '    location / {'; } >> "/etc/nginx/sites-available/${GHOST_DOMAIN_NAME}"
525
           echo '    location / {'; } >> "/etc/nginx/sites-available/${GHOST_DOMAIN_NAME}"
550
       echo '    access_log /dev/null;';
550
       echo '    access_log /dev/null;';
551
       echo "    error_log /dev/null;";
551
       echo "    error_log /dev/null;";
552
       echo ''; } >> "/etc/nginx/sites-available/${GHOST_DOMAIN_NAME}"
552
       echo ''; } >> "/etc/nginx/sites-available/${GHOST_DOMAIN_NAME}"
553
-    function_check nginx_disable_sniffing
554
-    nginx_disable_sniffing "${GHOST_DOMAIN_NAME}"
553
+    function_check nginx_security_options
554
+    nginx_security_options "${GHOST_DOMAIN_NAME}"
555
     { echo '    add_header Strict-Transport-Security max-age=0;';
555
     { echo '    add_header Strict-Transport-Security max-age=0;';
556
       echo '';
556
       echo '';
557
       echo '    location / {'; } >> "/etc/nginx/sites-available/${GHOST_DOMAIN_NAME}"
557
       echo '    location / {'; } >> "/etc/nginx/sites-available/${GHOST_DOMAIN_NAME}"

+ 4
- 4
src/freedombone-app-gnusocial Целия файл

707
         function_check nginx_ssl
707
         function_check nginx_ssl
708
         nginx_ssl "$GNUSOCIAL_DOMAIN_NAME"
708
         nginx_ssl "$GNUSOCIAL_DOMAIN_NAME"
709
 
709
 
710
-        function_check nginx_disable_sniffing
711
-        nginx_disable_sniffing "$GNUSOCIAL_DOMAIN_NAME"
710
+        function_check nginx_security_options
711
+        nginx_security_options "$GNUSOCIAL_DOMAIN_NAME"
712
 
712
 
713
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
713
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
714
           echo '';
714
           echo '';
756
     function_check nginx_compress
756
     function_check nginx_compress
757
     nginx_compress "$GNUSOCIAL_DOMAIN_NAME"
757
     nginx_compress "$GNUSOCIAL_DOMAIN_NAME"
758
     echo '' >> "$gnusocial_nginx_site"
758
     echo '' >> "$gnusocial_nginx_site"
759
-    function_check nginx_disable_sniffing
760
-    nginx_disable_sniffing "$GNUSOCIAL_DOMAIN_NAME"
759
+    function_check nginx_security_options
760
+    nginx_security_options "$GNUSOCIAL_DOMAIN_NAME"
761
     { echo '';
761
     { echo '';
762
       echo '  # Logs';
762
       echo '  # Logs';
763
       echo '  access_log /dev/null;';
763
       echo '  access_log /dev/null;';

+ 4
- 4
src/freedombone-app-gogs Целия файл

591
           echo ''; } >> "/etc/nginx/sites-available/${GIT_DOMAIN_NAME}"
591
           echo ''; } >> "/etc/nginx/sites-available/${GIT_DOMAIN_NAME}"
592
         function_check nginx_ssl
592
         function_check nginx_ssl
593
         nginx_ssl "${GIT_DOMAIN_NAME}"
593
         nginx_ssl "${GIT_DOMAIN_NAME}"
594
-        function_check nginx_disable_sniffing
595
-        nginx_disable_sniffing "${GIT_DOMAIN_NAME}"
594
+        function_check nginx_security_options
595
+        nginx_security_options "${GIT_DOMAIN_NAME}"
596
         { echo '    add_header Strict-Transport-Security max-age=0;';
596
         { echo '    add_header Strict-Transport-Security max-age=0;';
597
           echo '';
597
           echo '';
598
           echo '    location / {'; } >> "/etc/nginx/sites-available/${GIT_DOMAIN_NAME}"
598
           echo '    location / {'; } >> "/etc/nginx/sites-available/${GIT_DOMAIN_NAME}"
623
       echo '    access_log /dev/null;';
623
       echo '    access_log /dev/null;';
624
       echo "    error_log /dev/null;";
624
       echo "    error_log /dev/null;";
625
       echo ''; } >> "/etc/nginx/sites-available/${GIT_DOMAIN_NAME}"
625
       echo ''; } >> "/etc/nginx/sites-available/${GIT_DOMAIN_NAME}"
626
-    function_check nginx_disable_sniffing
627
-    nginx_disable_sniffing "${GIT_DOMAIN_NAME}"
626
+    function_check nginx_security_options
627
+    nginx_security_options "${GIT_DOMAIN_NAME}"
628
     { echo '    add_header Strict-Transport-Security max-age=0;';
628
     { echo '    add_header Strict-Transport-Security max-age=0;';
629
       echo '';
629
       echo '';
630
       echo '    location / {'; } >> "/etc/nginx/sites-available/${GIT_DOMAIN_NAME}"
630
       echo '    location / {'; } >> "/etc/nginx/sites-available/${GIT_DOMAIN_NAME}"

+ 4
- 4
src/freedombone-app-htmly Целия файл

460
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$HTMLY_DOMAIN_NAME"
460
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$HTMLY_DOMAIN_NAME"
461
     function_check nginx_ssl
461
     function_check nginx_ssl
462
     nginx_ssl "$HTMLY_DOMAIN_NAME"
462
     nginx_ssl "$HTMLY_DOMAIN_NAME"
463
-    function_check nginx_disable_sniffing
464
-    nginx_disable_sniffing "$HTMLY_DOMAIN_NAME"
463
+    function_check nginx_security_options
464
+    nginx_security_options "$HTMLY_DOMAIN_NAME"
465
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
465
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
466
       echo '';
466
       echo '';
467
       echo '    # rewrite to front controller as default rule';
467
       echo '    # rewrite to front controller as default rule';
542
       echo '    index index.php;';
542
       echo '    index index.php;';
543
       echo '    charset utf-8;';
543
       echo '    charset utf-8;';
544
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$HTMLY_DOMAIN_NAME"
544
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$HTMLY_DOMAIN_NAME"
545
-    function_check nginx_disable_sniffing
546
-    nginx_disable_sniffing "$HTMLY_DOMAIN_NAME"
545
+    function_check nginx_security_options
546
+    nginx_security_options "$HTMLY_DOMAIN_NAME"
547
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
547
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
548
       echo '';
548
       echo '';
549
       echo '    # rewrite to front controller as default rule';
549
       echo '    # rewrite to front controller as default rule';

+ 4
- 4
src/freedombone-app-hubzilla Целия файл

421
           echo '    access_log /dev/null;'; } >> "/etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME"
421
           echo '    access_log /dev/null;'; } >> "/etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME"
422
         function_check nginx_ssl
422
         function_check nginx_ssl
423
         nginx_ssl "$HUBZILLA_DOMAIN_NAME"
423
         nginx_ssl "$HUBZILLA_DOMAIN_NAME"
424
-        function_check nginx_disable_sniffing
425
-        nginx_disable_sniffing "$HUBZILLA_DOMAIN_NAME"
424
+        function_check nginx_security_options
425
+        nginx_security_options "$HUBZILLA_DOMAIN_NAME"
426
         { echo '    add_header Strict-Transport-Security max-age=15768000;';
426
         { echo '    add_header Strict-Transport-Security max-age=15768000;';
427
           echo '';
427
           echo '';
428
           echo '    # rewrite to front controller as default rule';
428
           echo '    # rewrite to front controller as default rule';
494
         echo '    # rewrite to front controller as default rule';
494
         echo '    # rewrite to front controller as default rule';
495
         echo '    location / {'; } > "/etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME"
495
         echo '    location / {'; } > "/etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME"
496
         nginx_limits "$HUBZILLA_DOMAIN_NAME"
496
         nginx_limits "$HUBZILLA_DOMAIN_NAME"
497
-        nginx_disable_sniffing "$HUBZILLA_DOMAIN_NAME"
497
+        nginx_security_options "$HUBZILLA_DOMAIN_NAME"
498
         { echo "        rewrite ^/(.*) /index.php?q=\$uri&\$args last;";
498
         { echo "        rewrite ^/(.*) /index.php?q=\$uri&\$args last;";
499
           echo '    }';
499
           echo '    }';
500
           echo '';
500
           echo '';
516
           echo '    # or a unix socket';
516
           echo '    # or a unix socket';
517
           echo '    location ~* \.php$ {'; } >> "/etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME"
517
           echo '    location ~* \.php$ {'; } >> "/etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME"
518
         nginx_limits "$HUBZILLA_DOMAIN_NAME"
518
         nginx_limits "$HUBZILLA_DOMAIN_NAME"
519
-        nginx_disable_sniffing "$HUBZILLA_DOMAIN_NAME"
519
+        nginx_security_options "$HUBZILLA_DOMAIN_NAME"
520
         { echo '        # Zero-day exploit defense.';
520
         { echo '        # Zero-day exploit defense.';
521
           echo '        # http://forum.nginx.org/read.php?2,88845,page=3';
521
           echo '        # http://forum.nginx.org/read.php?2,88845,page=3';
522
           echo "        # Won't work properly (404 error) if the file is not stored on this";
522
           echo "        # Won't work properly (404 error) if the file is not stored on this";

+ 2
- 2
src/freedombone-app-jitsi Целия файл

286
         function_check nginx_ssl
286
         function_check nginx_ssl
287
         nginx_ssl ${JITSI_DOMAIN_NAME}
287
         nginx_ssl ${JITSI_DOMAIN_NAME}
288
 
288
 
289
-        function_check nginx_disable_sniffing
290
-        nginx_disable_sniffing ${JITSI_DOMAIN_NAME}
289
+        function_check nginx_security_options
290
+        nginx_security_options ${JITSI_DOMAIN_NAME}
291
 
291
 
292
         { echo '    add_header Strict-Transport-Security max-age=15768000;';
292
         { echo '    add_header Strict-Transport-Security max-age=15768000;';
293
           echo '';
293
           echo '';

+ 4
- 4
src/freedombone-app-kanboard Целия файл

468
         function_check nginx_ssl
468
         function_check nginx_ssl
469
         nginx_ssl "$KANBOARD_DOMAIN_NAME"
469
         nginx_ssl "$KANBOARD_DOMAIN_NAME"
470
 
470
 
471
-        function_check nginx_disable_sniffing
472
-        nginx_disable_sniffing "$KANBOARD_DOMAIN_NAME"
471
+        function_check nginx_security_options
472
+        nginx_security_options "$KANBOARD_DOMAIN_NAME"
473
 
473
 
474
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
474
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
475
           echo '';
475
           echo '';
517
     function_check nginx_compress
517
     function_check nginx_compress
518
     nginx_compress "$KANBOARD_DOMAIN_NAME"
518
     nginx_compress "$KANBOARD_DOMAIN_NAME"
519
     echo '' >> "$kanboard_nginx_site"
519
     echo '' >> "$kanboard_nginx_site"
520
-    function_check nginx_disable_sniffing
521
-    nginx_disable_sniffing "$KANBOARD_DOMAIN_NAME"
520
+    function_check nginx_security_options
521
+    nginx_security_options "$KANBOARD_DOMAIN_NAME"
522
     { echo '';
522
     { echo '';
523
       echo '  # Logs';
523
       echo '  # Logs';
524
       echo '  access_log /dev/null;';
524
       echo '  access_log /dev/null;';

+ 4
- 4
src/freedombone-app-keyserver Целия файл

742
         function_check nginx_ssl
742
         function_check nginx_ssl
743
         nginx_ssl $KEYSERVER_DOMAIN_NAME
743
         nginx_ssl $KEYSERVER_DOMAIN_NAME
744
 
744
 
745
-        function_check nginx_disable_sniffing
746
-        nginx_disable_sniffing $KEYSERVER_DOMAIN_NAME
745
+        function_check nginx_security_options
746
+        nginx_security_options $KEYSERVER_DOMAIN_NAME
747
 
747
 
748
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
748
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
749
           echo '';
749
           echo '';
792
       echo '    return 404;';
792
       echo '    return 404;';
793
       echo '  }';
793
       echo '  }';
794
       echo ''; } >> $keyserver_nginx_site
794
       echo ''; } >> $keyserver_nginx_site
795
-    function_check nginx_disable_sniffing
796
-    nginx_disable_sniffing $KEYSERVER_DOMAIN_NAME
795
+    function_check nginx_security_options
796
+    nginx_security_options $KEYSERVER_DOMAIN_NAME
797
     { echo '';
797
     { echo '';
798
       echo '  # Logs';
798
       echo '  # Logs';
799
       echo '  access_log /dev/null;';
799
       echo '  access_log /dev/null;';

+ 2
- 2
src/freedombone-app-koel Целия файл

553
         function_check nginx_ssl mobile
553
         function_check nginx_ssl mobile
554
         nginx_ssl "$KOEL_DOMAIN_NAME"
554
         nginx_ssl "$KOEL_DOMAIN_NAME"
555
 
555
 
556
-        function_check nginx_disable_sniffing
557
-        nginx_disable_sniffing "$KOEL_DOMAIN_NAME"
556
+        function_check nginx_security_options
557
+        nginx_security_options "$KOEL_DOMAIN_NAME"
558
 
558
 
559
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
559
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
560
           echo '';
560
           echo '';

+ 4
- 4
src/freedombone-app-lychee Целия файл

270
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$LYCHEE_DOMAIN_NAME"
270
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$LYCHEE_DOMAIN_NAME"
271
     function_check nginx_ssl
271
     function_check nginx_ssl
272
     nginx_ssl "$LYCHEE_DOMAIN_NAME"
272
     nginx_ssl "$LYCHEE_DOMAIN_NAME"
273
-    function_check nginx_disable_sniffing
274
-    nginx_disable_sniffing "$LYCHEE_DOMAIN_NAME"
273
+    function_check nginx_security_options
274
+    nginx_security_options "$LYCHEE_DOMAIN_NAME"
275
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
275
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
276
       echo '';
276
       echo '';
277
       echo '    # rewrite to front controller as default rule';
277
       echo '    # rewrite to front controller as default rule';
331
       echo '    index index.html;';
331
       echo '    index index.html;';
332
       echo '    charset utf-8;';
332
       echo '    charset utf-8;';
333
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$LYCHEE_DOMAIN_NAME"
333
       echo '    proxy_read_timeout 86400s;'; } >> "/etc/nginx/sites-available/$LYCHEE_DOMAIN_NAME"
334
-    function_check nginx_disable_sniffing
335
-    nginx_disable_sniffing "$LYCHEE_DOMAIN_NAME"
334
+    function_check nginx_security_options
335
+    nginx_security_options "$LYCHEE_DOMAIN_NAME"
336
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
336
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
337
       echo '';
337
       echo '';
338
       echo '    # rewrite to front controller as default rule';
338
       echo '    # rewrite to front controller as default rule';

+ 4
- 4
src/freedombone-app-mailpile Целия файл

248
         function_check nginx_ssl
248
         function_check nginx_ssl
249
         nginx_ssl $MAILPILE_DOMAIN_NAME
249
         nginx_ssl $MAILPILE_DOMAIN_NAME
250
 
250
 
251
-        function_check nginx_disable_sniffing
252
-        nginx_disable_sniffing $MAILPILE_DOMAIN_NAME
251
+        function_check nginx_security_options
252
+        nginx_security_options $MAILPILE_DOMAIN_NAME
253
 
253
 
254
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
254
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
255
           echo '';
255
           echo '';
280
       echo "    listen 127.0.0.1:$MAILPILE_ONION_PORT default_server;";
280
       echo "    listen 127.0.0.1:$MAILPILE_ONION_PORT default_server;";
281
       echo "    server_name $MAILPILE_ONION_HOSTNAME;";
281
       echo "    server_name $MAILPILE_ONION_HOSTNAME;";
282
       echo ''; } >> $mailpile_nginx_site
282
       echo ''; } >> $mailpile_nginx_site
283
-    function_check nginx_disable_sniffing
284
-    nginx_disable_sniffing $MAILPILE_DOMAIN_NAME
283
+    function_check nginx_security_options
284
+    nginx_security_options $MAILPILE_DOMAIN_NAME
285
     { echo '';
285
     { echo '';
286
       echo '  # Logs';
286
       echo '  # Logs';
287
       echo '  access_log /dev/null;';
287
       echo '  access_log /dev/null;';

+ 8
- 8
src/freedombone-app-matrix Целия файл

135
         function_check nginx_ssl
135
         function_check nginx_ssl
136
         nginx_ssl ${MATRIX_DOMAIN_NAME}
136
         nginx_ssl ${MATRIX_DOMAIN_NAME}
137
 
137
 
138
-        function_check nginx_disable_sniffing
139
-        nginx_disable_sniffing ${MATRIX_DOMAIN_NAME}
138
+        function_check nginx_security_options
139
+        nginx_security_options ${MATRIX_DOMAIN_NAME}
140
 
140
 
141
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
141
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
142
           echo '';
142
           echo '';
164
         function_check nginx_ssl
164
         function_check nginx_ssl
165
         nginx_ssl ${MATRIX_DOMAIN_NAME}
165
         nginx_ssl ${MATRIX_DOMAIN_NAME}
166
 
166
 
167
-        function_check nginx_disable_sniffing
168
-        nginx_disable_sniffing ${MATRIX_DOMAIN_NAME}
167
+        function_check nginx_security_options
168
+        nginx_security_options ${MATRIX_DOMAIN_NAME}
169
 
169
 
170
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
170
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
171
           echo '';
171
           echo '';
193
       echo "    listen 127.0.0.1:$MATRIX_FEDERATION_ONION_PORT default_server;";
193
       echo "    listen 127.0.0.1:$MATRIX_FEDERATION_ONION_PORT default_server;";
194
       echo "    server_name $MATRIX_DOMAIN_NAME;";
194
       echo "    server_name $MATRIX_DOMAIN_NAME;";
195
       echo ''; } >> $matrix_nginx_site
195
       echo ''; } >> $matrix_nginx_site
196
-    function_check nginx_disable_sniffing
197
-    nginx_disable_sniffing $MATRIX_DOMAIN_NAME
196
+    function_check nginx_security_options
197
+    nginx_security_options $MATRIX_DOMAIN_NAME
198
     { echo '';
198
     { echo '';
199
       echo '  # Logs';
199
       echo '  # Logs';
200
       echo '  access_log /dev/null;';
200
       echo '  access_log /dev/null;';
214
       echo "    listen 127.0.0.1:$MATRIX_ONION_PORT default_server;";
214
       echo "    listen 127.0.0.1:$MATRIX_ONION_PORT default_server;";
215
       echo "    server_name $MATRIX_DOMAIN_NAME;";
215
       echo "    server_name $MATRIX_DOMAIN_NAME;";
216
       echo ''; } >> $matrix_nginx_site
216
       echo ''; } >> $matrix_nginx_site
217
-    function_check nginx_disable_sniffing
218
-    nginx_disable_sniffing $MATRIX_DOMAIN_NAME
217
+    function_check nginx_security_options
218
+    nginx_security_options $MATRIX_DOMAIN_NAME
219
     { echo '';
219
     { echo '';
220
       echo '  # Logs';
220
       echo '  # Logs';
221
       echo '  access_log /dev/null;';
221
       echo '  access_log /dev/null;';

+ 4
- 4
src/freedombone-app-mediagoblin Целия файл

381
           echo ''; } >> "/etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME"
381
           echo ''; } >> "/etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME"
382
         function_check nginx_ssl
382
         function_check nginx_ssl
383
         nginx_ssl "$MEDIAGOBLIN_DOMAIN_NAME"
383
         nginx_ssl "$MEDIAGOBLIN_DOMAIN_NAME"
384
-        function_check nginx_disable_sniffing
385
-        nginx_disable_sniffing "$MEDIAGOBLIN_DOMAIN_NAME"
384
+        function_check nginx_security_options
385
+        nginx_security_options "$MEDIAGOBLIN_DOMAIN_NAME"
386
         function_check nginx_limits
386
         function_check nginx_limits
387
         nginx_limits "$MEDIAGOBLIN_DOMAIN_NAME" 800m
387
         nginx_limits "$MEDIAGOBLIN_DOMAIN_NAME" 800m
388
         { echo '';
388
         { echo '';
438
       echo '    default_type  application/octet-stream;';
438
       echo '    default_type  application/octet-stream;';
439
       echo '    sendfile on;';
439
       echo '    sendfile on;';
440
       echo ''; } >> "/etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME"
440
       echo ''; } >> "/etc/nginx/sites-available/$MEDIAGOBLIN_DOMAIN_NAME"
441
-    function_check nginx_disable_sniffing
442
-    nginx_disable_sniffing "$MEDIAGOBLIN_DOMAIN_NAME"
441
+    function_check nginx_security_options
442
+    nginx_security_options "$MEDIAGOBLIN_DOMAIN_NAME"
443
     function_check nginx_limits
443
     function_check nginx_limits
444
     nginx_limits "$MEDIAGOBLIN_DOMAIN_NAME" 800m
444
     nginx_limits "$MEDIAGOBLIN_DOMAIN_NAME" 800m
445
     { echo '';
445
     { echo '';

+ 4
- 4
src/freedombone-app-movim Целия файл

444
         function_check nginx_ssl
444
         function_check nginx_ssl
445
         nginx_ssl "$MOVIM_DOMAIN_NAME"
445
         nginx_ssl "$MOVIM_DOMAIN_NAME"
446
 
446
 
447
-        function_check nginx_disable_sniffing
448
-        nginx_disable_sniffing "$MOVIM_DOMAIN_NAME"
447
+        function_check nginx_security_options
448
+        nginx_security_options "$MOVIM_DOMAIN_NAME"
449
 
449
 
450
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
450
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
451
           echo '';
451
           echo '';
506
     function_check nginx_compress
506
     function_check nginx_compress
507
     nginx_compress "$MOVIM_DOMAIN_NAME"
507
     nginx_compress "$MOVIM_DOMAIN_NAME"
508
     echo '' >> "$movim_nginx_site"
508
     echo '' >> "$movim_nginx_site"
509
-    function_check nginx_disable_sniffing
510
-    nginx_disable_sniffing "$MOVIM_DOMAIN_NAME"
509
+    function_check nginx_security_options
510
+    nginx_security_options "$MOVIM_DOMAIN_NAME"
511
     { echo '';
511
     { echo '';
512
       echo '  # Logs';
512
       echo '  # Logs';
513
       echo '  access_log /dev/null;';
513
       echo '  access_log /dev/null;';

+ 4
- 4
src/freedombone-app-nextcloud Целия файл

490
         function_check nginx_ssl
490
         function_check nginx_ssl
491
         nginx_ssl "$NEXTCLOUD_DOMAIN_NAME" mobile
491
         nginx_ssl "$NEXTCLOUD_DOMAIN_NAME" mobile
492
 
492
 
493
-        function_check nginx_disable_sniffing
494
-        nginx_disable_sniffing "$NEXTCLOUD_DOMAIN_NAME"
493
+        function_check nginx_security_options
494
+        nginx_security_options "$NEXTCLOUD_DOMAIN_NAME"
495
 
495
 
496
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
496
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
497
           echo '';
497
           echo '';
554
       echo "    listen 127.0.0.1:$NEXTCLOUD_ONION_PORT default_server;";
554
       echo "    listen 127.0.0.1:$NEXTCLOUD_ONION_PORT default_server;";
555
       echo "    server_name $NEXTCLOUD_DOMAIN_NAME;";
555
       echo "    server_name $NEXTCLOUD_DOMAIN_NAME;";
556
       echo ''; } >> "$nextcloud_nginx_site"
556
       echo ''; } >> "$nextcloud_nginx_site"
557
-    function_check nginx_disable_sniffing
558
-    nginx_disable_sniffing "$NEXTCLOUD_DOMAIN_NAME"
557
+    function_check nginx_security_options
558
+    nginx_security_options "$NEXTCLOUD_DOMAIN_NAME"
559
     { echo '';
559
     { echo '';
560
       echo '  # Logs';
560
       echo '  # Logs';
561
       echo '  access_log /dev/null;';
561
       echo '  access_log /dev/null;';

+ 2
- 2
src/freedombone-app-peertube Целия файл

376
         function_check nginx_ssl
376
         function_check nginx_ssl
377
         nginx_ssl "$PEERTUBE_DOMAIN_NAME" mobile
377
         nginx_ssl "$PEERTUBE_DOMAIN_NAME" mobile
378
 
378
 
379
-        function_check nginx_disable_sniffing
380
-        nginx_disable_sniffing "$PEERTUBE_DOMAIN_NAME"
379
+        function_check nginx_security_options
380
+        nginx_security_options "$PEERTUBE_DOMAIN_NAME"
381
 
381
 
382
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
382
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
383
           echo '';
383
           echo '';

+ 4
- 4
src/freedombone-app-pelican Целия файл

84
       echo '    charset utf-8;'; } >> "/etc/nginx/sites-available/$PELICAN_DOMAIN_NAME"
84
       echo '    charset utf-8;'; } >> "/etc/nginx/sites-available/$PELICAN_DOMAIN_NAME"
85
     function_check nginx_ssl
85
     function_check nginx_ssl
86
     nginx_ssl "$PELICAN_DOMAIN_NAME"
86
     nginx_ssl "$PELICAN_DOMAIN_NAME"
87
-    function_check nginx_disable_sniffing
88
-    nginx_disable_sniffing "$PELICAN_DOMAIN_NAME"
87
+    function_check nginx_security_options
88
+    nginx_security_options "$PELICAN_DOMAIN_NAME"
89
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
89
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
90
       echo '';
90
       echo '';
91
       echo '    location / {'; } >> "/etc/nginx/sites-available/$PELICAN_DOMAIN_NAME"
91
       echo '    location / {'; } >> "/etc/nginx/sites-available/$PELICAN_DOMAIN_NAME"
125
       echo "    error_log /dev/null;";
125
       echo "    error_log /dev/null;";
126
       echo '    index index.html;';
126
       echo '    index index.html;';
127
       echo '    charset utf-8;'; } >> "/etc/nginx/sites-available/$PELICAN_DOMAIN_NAME"
127
       echo '    charset utf-8;'; } >> "/etc/nginx/sites-available/$PELICAN_DOMAIN_NAME"
128
-    function_check nginx_disable_sniffing
129
-    nginx_disable_sniffing "$PELICAN_DOMAIN_NAME"
128
+    function_check nginx_security_options
129
+    nginx_security_options "$PELICAN_DOMAIN_NAME"
130
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
130
     { echo '    add_header Strict-Transport-Security "max-age=0;";';
131
       echo '';
131
       echo '';
132
       echo '    location / {'; } >> "/etc/nginx/sites-available/$PELICAN_DOMAIN_NAME"
132
       echo '    location / {'; } >> "/etc/nginx/sites-available/$PELICAN_DOMAIN_NAME"

+ 4
- 4
src/freedombone-app-pleroma Целия файл

1029
         function_check nginx_ssl
1029
         function_check nginx_ssl
1030
         nginx_ssl "$PLEROMA_DOMAIN_NAME"
1030
         nginx_ssl "$PLEROMA_DOMAIN_NAME"
1031
 
1031
 
1032
-        function_check nginx_disable_sniffing
1033
-        nginx_disable_sniffing "$PLEROMA_DOMAIN_NAME"
1032
+        function_check nginx_security_options
1033
+        nginx_security_options "$PLEROMA_DOMAIN_NAME"
1034
 
1034
 
1035
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
1035
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
1036
           echo '';
1036
           echo '';
1069
     function_check nginx_compress
1069
     function_check nginx_compress
1070
     nginx_compress "$PLEROMA_DOMAIN_NAME"
1070
     nginx_compress "$PLEROMA_DOMAIN_NAME"
1071
     echo '' >> "$pleroma_nginx_site"
1071
     echo '' >> "$pleroma_nginx_site"
1072
-    function_check nginx_disable_sniffing
1073
-    nginx_disable_sniffing "$PLEROMA_DOMAIN_NAME"
1072
+    function_check nginx_security_options
1073
+    nginx_security_options "$PLEROMA_DOMAIN_NAME"
1074
     { echo '';
1074
     { echo '';
1075
       echo '  # Logs';
1075
       echo '  # Logs';
1076
       echo '  access_log /dev/null;';
1076
       echo '  access_log /dev/null;';

+ 4
- 4
src/freedombone-app-postactiv Целия файл

721
         function_check nginx_ssl
721
         function_check nginx_ssl
722
         nginx_ssl "$POSTACTIV_DOMAIN_NAME"
722
         nginx_ssl "$POSTACTIV_DOMAIN_NAME"
723
 
723
 
724
-        function_check nginx_disable_sniffing
725
-        nginx_disable_sniffing "$POSTACTIV_DOMAIN_NAME"
724
+        function_check nginx_security_options
725
+        nginx_security_options "$POSTACTIV_DOMAIN_NAME"
726
 
726
 
727
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
727
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
728
           echo '';
728
           echo '';
767
       echo "    listen 127.0.0.1:$POSTACTIV_ONION_PORT default_server;";
767
       echo "    listen 127.0.0.1:$POSTACTIV_ONION_PORT default_server;";
768
       echo "    server_name $POSTACTIV_ONION_HOSTNAME;";
768
       echo "    server_name $POSTACTIV_ONION_HOSTNAME;";
769
       echo ''; } >> "$postactiv_nginx_site"
769
       echo ''; } >> "$postactiv_nginx_site"
770
-    function_check nginx_disable_sniffing
771
-    nginx_disable_sniffing "$POSTACTIV_DOMAIN_NAME"
770
+    function_check nginx_security_options
771
+    nginx_security_options "$POSTACTIV_DOMAIN_NAME"
772
     echo '' >> "$postactiv_nginx_site"
772
     echo '' >> "$postactiv_nginx_site"
773
     function_check nginx_compress
773
     function_check nginx_compress
774
     nginx_compress "$POSTACTIV_DOMAIN_NAME"
774
     nginx_compress "$POSTACTIV_DOMAIN_NAME"

+ 4
- 4
src/freedombone-app-privatebin Целия файл

351
         function_check nginx_ssl
351
         function_check nginx_ssl
352
         nginx_ssl "$PRIVATEBIN_DOMAIN_NAME"
352
         nginx_ssl "$PRIVATEBIN_DOMAIN_NAME"
353
 
353
 
354
-        function_check nginx_disable_sniffing
355
-        nginx_disable_sniffing "$PRIVATEBIN_DOMAIN_NAME"
354
+        function_check nginx_security_options
355
+        nginx_security_options "$PRIVATEBIN_DOMAIN_NAME"
356
 
356
 
357
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
357
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
358
           echo '';
358
           echo '';
393
     function_check nginx_compress
393
     function_check nginx_compress
394
     nginx_compress "$PRIVATEBIN_DOMAIN_NAME"
394
     nginx_compress "$PRIVATEBIN_DOMAIN_NAME"
395
     echo '' >> "$privatebin_nginx_site"
395
     echo '' >> "$privatebin_nginx_site"
396
-    function_check nginx_disable_sniffing
397
-    nginx_disable_sniffing "$PRIVATEBIN_DOMAIN_NAME"
396
+    function_check nginx_security_options
397
+    nginx_security_options "$PRIVATEBIN_DOMAIN_NAME"
398
     { echo '';
398
     { echo '';
399
       echo '  # Logs';
399
       echo '  # Logs';
400
       echo '  access_log /dev/null;';
400
       echo '  access_log /dev/null;';

+ 2
- 2
src/freedombone-app-radicale Целия файл

476
               echo ''; } > "/etc/nginx/sites-available/${DEFAULT_DOMAIN_NAME}"
476
               echo ''; } > "/etc/nginx/sites-available/${DEFAULT_DOMAIN_NAME}"
477
             function_check nginx_ssl
477
             function_check nginx_ssl
478
             nginx_ssl "${DEFAULT_DOMAIN_NAME}" mobile
478
             nginx_ssl "${DEFAULT_DOMAIN_NAME}" mobile
479
-            function_check nginx_disable_sniffing
480
-            nginx_disable_sniffing "${DEFAULT_DOMAIN_NAME}"
479
+            function_check nginx_security_options
480
+            nginx_security_options "${DEFAULT_DOMAIN_NAME}"
481
             { echo '';
481
             { echo '';
482
               echo "    server_name ${DEFAULT_DOMAIN_NAME};";
482
               echo "    server_name ${DEFAULT_DOMAIN_NAME};";
483
 
483
 

+ 4
- 4
src/freedombone-app-riot Целия файл

279
         function_check nginx_ssl
279
         function_check nginx_ssl
280
         nginx_ssl $RIOT_DOMAIN_NAME
280
         nginx_ssl $RIOT_DOMAIN_NAME
281
 
281
 
282
-        function_check nginx_disable_sniffing
283
-        nginx_disable_sniffing $RIOT_DOMAIN_NAME
282
+        function_check nginx_security_options
283
+        nginx_security_options $RIOT_DOMAIN_NAME
284
 
284
 
285
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
285
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
286
           echo '';
286
           echo '';
306
       echo "    listen 127.0.0.1:$RIOT_ONION_PORT default_server;";
306
       echo "    listen 127.0.0.1:$RIOT_ONION_PORT default_server;";
307
       echo "    server_name $RIOT_ONION_HOSTNAME;";
307
       echo "    server_name $RIOT_ONION_HOSTNAME;";
308
       echo ''; } >> $riot_nginx_site
308
       echo ''; } >> $riot_nginx_site
309
-    function_check nginx_disable_sniffing
310
-    nginx_disable_sniffing $RIOT_DOMAIN_NAME
309
+    function_check nginx_security_options
310
+    nginx_security_options $RIOT_DOMAIN_NAME
311
     { echo '';
311
     { echo '';
312
       echo '  # Logs';
312
       echo '  # Logs';
313
       echo '  access_log /dev/null;';
313
       echo '  access_log /dev/null;';

+ 2
- 2
src/freedombone-app-scuttlebot Целия файл

317
         function_check nginx_ssl
317
         function_check nginx_ssl
318
         nginx_ssl $SCUTTLEBOT_DOMAIN_NAME
318
         nginx_ssl $SCUTTLEBOT_DOMAIN_NAME
319
 
319
 
320
-        function_check nginx_disable_sniffing
321
-        nginx_disable_sniffing $SCUTTLEBOT_DOMAIN_NAME
320
+        function_check nginx_security_options
321
+        nginx_security_options $SCUTTLEBOT_DOMAIN_NAME
322
     fi
322
     fi
323
 
323
 
324
     { echo '';
324
     { echo '';

+ 2
- 2
src/freedombone-app-searx Целия файл

967
       echo '    access_log /dev/null;';
967
       echo '    access_log /dev/null;';
968
       echo "    error_log /var/log/searx_error.log $WEBSERVER_LOG_LEVEL;";
968
       echo "    error_log /var/log/searx_error.log $WEBSERVER_LOG_LEVEL;";
969
       echo ''; } > /etc/nginx/sites-available/searx
969
       echo ''; } > /etc/nginx/sites-available/searx
970
-    function_check nginx_disable_sniffing
971
-    nginx_disable_sniffing searx
970
+    function_check nginx_security_options
971
+    nginx_security_options searx
972
     { echo '    add_header Strict-Transport-Security max-age=0;';
972
     { echo '    add_header Strict-Transport-Security max-age=0;';
973
       echo '';
973
       echo '';
974
       echo '    location / {'; } >> /etc/nginx/sites-available/searx
974
       echo '    location / {'; } >> /etc/nginx/sites-available/searx

+ 2
- 2
src/freedombone-app-tahoelafs Целия файл

608
       echo "    listen 127.0.0.1:$TAHOELAFS_ONION_PORT default_server;";
608
       echo "    listen 127.0.0.1:$TAHOELAFS_ONION_PORT default_server;";
609
       echo "    server_name $TAHOELAFS_ONION_HOSTNAME;";
609
       echo "    server_name $TAHOELAFS_ONION_HOSTNAME;";
610
       echo ''; } > "$tahoelafs_nginx_site"
610
       echo ''; } > "$tahoelafs_nginx_site"
611
-    function_check nginx_disable_sniffing
612
-    nginx_disable_sniffing tahoelafs
611
+    function_check nginx_security_options
612
+    nginx_security_options tahoelafs
613
     { echo '';
613
     { echo '';
614
       echo '  # Logs';
614
       echo '  # Logs';
615
       echo '  access_log /dev/null;';
615
       echo '  access_log /dev/null;';

+ 4
- 4
src/freedombone-app-turtl Целия файл

674
         function_check nginx_ssl
674
         function_check nginx_ssl
675
         nginx_ssl $TURTL_DOMAIN_NAME
675
         nginx_ssl $TURTL_DOMAIN_NAME
676
 
676
 
677
-        function_check nginx_disable_sniffing
678
-        nginx_disable_sniffing $TURTL_DOMAIN_NAME
677
+        function_check nginx_security_options
678
+        nginx_security_options $TURTL_DOMAIN_NAME
679
 
679
 
680
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
680
         { echo '  add_header Strict-Transport-Security max-age=15768000;';
681
           echo '';
681
           echo '';
698
       echo "  listen 127.0.0.1:${TURTL_ONION_PORT};";
698
       echo "  listen 127.0.0.1:${TURTL_ONION_PORT};";
699
       echo "  server_name ${TURTL_ONION_HOSTNAME};";
699
       echo "  server_name ${TURTL_ONION_HOSTNAME};";
700
       echo ''; } >> $turtl_nginx_site
700
       echo ''; } >> $turtl_nginx_site
701
-    function_check nginx_disable_sniffing
702
-    nginx_disable_sniffing $TURTL_DOMAIN_NAME
701
+    function_check nginx_security_options
702
+    nginx_security_options $TURTL_DOMAIN_NAME
703
     { echo '';
703
     { echo '';
704
       echo '  # Logs';
704
       echo '  # Logs';
705
       echo '  access_log /dev/null;';
705
       echo '  access_log /dev/null;';

+ 2
- 2
src/freedombone-template Целия файл

665
     echo "        echo '  # Security' >> \$${app_name}_nginx_site"
665
     echo "        echo '  # Security' >> \$${app_name}_nginx_site"
666
     echo "        nginx_ssl \$${app_name_upper}_DOMAIN_NAME"
666
     echo "        nginx_ssl \$${app_name_upper}_DOMAIN_NAME"
667
     echo ''
667
     echo ''
668
-    echo "        nginx_disable_sniffing \$${app_name_upper}_DOMAIN_NAME"
668
+    echo "        nginx_security_options \$${app_name_upper}_DOMAIN_NAME"
669
     echo ''
669
     echo ''
670
     echo "        echo '  add_header Strict-Transport-Security max-age=15768000;' >> \$${app_name}_nginx_site"
670
     echo "        echo '  add_header Strict-Transport-Security max-age=15768000;' >> \$${app_name}_nginx_site"
671
     echo "        echo '' >> \$${app_name}_nginx_site"
671
     echo "        echo '' >> \$${app_name}_nginx_site"
709
 echo "    echo '' >> \$${app_name}_nginx_site"
709
 echo "    echo '' >> \$${app_name}_nginx_site"
710
 echo "    nginx_compress \$${app_name_upper}_DOMAIN_NAME"
710
 echo "    nginx_compress \$${app_name_upper}_DOMAIN_NAME"
711
 echo "    echo '' >> \$${app_name}_nginx_site"
711
 echo "    echo '' >> \$${app_name}_nginx_site"
712
-echo "    nginx_disable_sniffing \$${app_name_upper}_DOMAIN_NAME"
712
+echo "    nginx_security_options \$${app_name_upper}_DOMAIN_NAME"
713
 echo "    echo '' >> \$${app_name}_nginx_site"
713
 echo "    echo '' >> \$${app_name}_nginx_site"
714
 echo "    echo '  # Logs' >> \$${app_name}_nginx_site"
714
 echo "    echo '  # Logs' >> \$${app_name}_nginx_site"
715
 echo "    echo '  access_log /dev/null;' >> \$${app_name}_nginx_site"
715
 echo "    echo '  access_log /dev/null;' >> \$${app_name}_nginx_site"

+ 4
- 4
src/freedombone-utils-turn Целия файл

81
             function_check nginx_ssl
81
             function_check nginx_ssl
82
             nginx_ssl "${DEFAULT_DOMAIN_NAME}"
82
             nginx_ssl "${DEFAULT_DOMAIN_NAME}"
83
 
83
 
84
-            function_check nginx_disable_sniffing
85
-            nginx_disable_sniffing "${DEFAULT_DOMAIN_NAME}"
84
+            function_check nginx_security_options
85
+            nginx_security_options "${DEFAULT_DOMAIN_NAME}"
86
 
86
 
87
             { echo '  add_header Strict-Transport-Security max-age=15768000;';
87
             { echo '  add_header Strict-Transport-Security max-age=15768000;';
88
               echo '';
88
               echo '';
109
           echo "    listen 127.0.0.1:$TURN_ONION_PORT default_server;";
109
           echo "    listen 127.0.0.1:$TURN_ONION_PORT default_server;";
110
           echo "    server_name $DEFAULT_DOMAIN_NAME;";
110
           echo "    server_name $DEFAULT_DOMAIN_NAME;";
111
           echo ''; } >> "$turn_nginx_site"
111
           echo ''; } >> "$turn_nginx_site"
112
-        function_check nginx_disable_sniffing
113
-        nginx_disable_sniffing "$DEFAULT_DOMAIN_NAME"
112
+        function_check nginx_security_options
113
+        nginx_security_options "$DEFAULT_DOMAIN_NAME"
114
         { echo '';
114
         { echo '';
115
           echo '  # Logs';
115
           echo '  # Logs';
116
           echo '  access_log /dev/null;';
116
           echo '  access_log /dev/null;';

+ 5
- 5
src/freedombone-utils-web Целия файл

71
     fi
71
     fi
72
 }
72
 }
73
 
73
 
74
-function nginx_disable_sniffing {
74
+function nginx_security_options {
75
     domain_name=$1
75
     domain_name=$1
76
     filename=/etc/nginx/sites-available/$domain_name
76
     filename=/etc/nginx/sites-available/$domain_name
77
     { echo '    add_header X-Frame-Options DENY;';
77
     { echo '    add_header X-Frame-Options DENY;';
913
             function_check nginx_ssl
913
             function_check nginx_ssl
914
             nginx_ssl "$DEFAULT_DOMAIN_NAME" mobile
914
             nginx_ssl "$DEFAULT_DOMAIN_NAME" mobile
915
 
915
 
916
-            function_check nginx_disable_sniffing
917
-            nginx_disable_sniffing "$DEFAULT_DOMAIN_NAME"
916
+            function_check nginx_security_options
917
+            nginx_security_options "$DEFAULT_DOMAIN_NAME"
918
 
918
 
919
             { echo '  add_header Strict-Transport-Security max-age=15768000;';
919
             { echo '  add_header Strict-Transport-Security max-age=15768000;';
920
               echo '';
920
               echo '';
946
           echo "    listen 127.0.0.1:$DEFAULT_DOMAIN_ONION_PORT default_server;";
946
           echo "    listen 127.0.0.1:$DEFAULT_DOMAIN_ONION_PORT default_server;";
947
           echo "    server_name $DEFAULT_DOMAIN_NAME;";
947
           echo "    server_name $DEFAULT_DOMAIN_NAME;";
948
           echo ''; } >> "$nginx_site"
948
           echo ''; } >> "$nginx_site"
949
-        function_check nginx_disable_sniffing
950
-        nginx_disable_sniffing "$DEFAULT_DOMAIN_NAME"
949
+        function_check nginx_security_options
950
+        nginx_security_options "$DEFAULT_DOMAIN_NAME"
951
         { echo '';
951
         { echo '';
952
           echo '  # Logs';
952
           echo '  # Logs';
953
           echo '  access_log /dev/null;';
953
           echo '  access_log /dev/null;';