summaryrefslogtreecommitdiff
path: root/system/tls
AgeCommit message (Collapse)Author
2025-02-22fix: all hange s\/github.com\/ponzu-cms/github.com\/haturatu\/ghaturatu
2019-12-29Allow data directories outside pwdMiguel Angel Ajo
Running ponzu-cms inside a docker container, and maintaining data files in a volume (or several) was not possible with the previous directory schema without copying files or binaries to the volume. This commit adds several environment variables to allow the administrator to specify paths for directories while retaining backwards compatibility. - PONZU_DATA_DIR : is the directory where all the data and other directories will be stored, still the other directories can be controlled by the other env variables. - PONZU_TLS_DIR : is the directory to store devcerts and autocerts - PONZU_ADMINSTATIC_DIR : directory where the admin static files are served from. - PONZU_UPLOAD_DIR: upload files directory - PONZU_SEARCH_DIR: index directory for searches
2018-01-14Update to meet Let's Encrypt challenge requirment (#220)Steve Manuel
* [deps] acme/autocert: update to latest with support for "http-01" challenge * [core] system/tls: implement handler for "http-01" challenge
2017-04-17package documentation for godocSteve Manuel
2017-03-16Typo fixesferhat elmas
2017-01-16[core] Adding toggle for CORS, GZIP in admin/cms configuration (#30)Steve
This PR enables admins to disable/enable CORS and GZIP from within the admin CMS configuration page. Both are enabled by default. Note: currently, the GZIP implementation is 100% on the fly, for every qualifying API endpoint request. This could add significant CPU usage, but dramatically decreases bandwidth. Will be considering other better implementations, but for now YMMV. Possible optimizations: - pooling gzip Writers vs. creating a new one for each response - caching gzipped responses (in memory? on disk?) - enforcing size threshold (only gzip content larger than N bytes)
2017-01-04Fixed self-signed certificates when running a dev serverZach Shipko
2017-01-04updating import path from old repoSteve Manuel
2017-01-04adding https_port from db to enabledev funcSteve Manuel
2017-01-04adding httpsport and https_port to flags and configSteve Manuel
2016-12-28moving dev notes in run command to mainSteve Manuel
2016-12-28moving call point of goroutine to be more visible to userSteve Manuel
2016-12-28removing old fmt print for debugSteve Manuel
2016-12-28adding hint to troubleshoot ssl cert issues on chromeSteve Manuel
2016-12-28reverting to more simple key gen algorithmSteve Manuel
2016-12-28adding more desctiptive print messages, putting devhttps server on goroutineSteve Manuel
2016-12-27trying alternate key gen algorithmSteve Manuel
2016-12-27trying alternate key gen algorithmSteve Manuel
2016-12-27adding alternate usage and ca optionsSteve Manuel
2016-12-27trying alternate key gen algorithmSteve Manuel
2016-12-27remove old certs if foundSteve Manuel
2016-12-27adding CA option back for testingSteve Manuel
2016-12-27add additional cert usage back for testingSteve Manuel
2016-12-27changing cert to not be a CASteve Manuel
2016-12-27adding digital sig as option for key usageSteve Manuel
2016-12-27adding vendor path to location of certs in EnableDevSteve Manuel
2016-12-27updated vendored system path for tls certsSteve Manuel
2016-12-27need vendored system path for tls certsSteve Manuel
2016-12-27adding error logging to debugSteve Manuel
2016-12-27adding self-signed cert generator for local https/http2 testingSteve Manuel
2016-12-19moving repository, bosssauce => ponzu-cmsSteve Manuel
2016-12-02casting var to strings for printing in shellSteve Manuel
2016-10-24removing debug printlns and modifying other fmt.Println to log.Println for ↵Steve Manuel
consistency
2016-10-21adding support for TLS encryption, providing http/2 over HTTPS connections ↵Steve Manuel
via port 443 - certificates obtained from Lets Encrypt, which is currently the default and only supprted CA
2016-10-21adding better error handling to check for nil valuesSteve Manuel
2016-10-21testing 443 as only tls bound portSteve Manuel
2016-10-21adding initial support for TLS encryption via Lets EncryptSteve Manuel