CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-06-28 13:18:13 +02:00
Code Issues Packages Projects Releases Wiki Activity
18,350 Commits 38 Branches 127 Tags
kernel
Commit Graph

114 Commits

Author SHA1 Message Date
Mike Reeves 339a5af4a3 Serve /kernelrepo through nginx so minions can reach the kernel repo 
The /nsm/kernelrepo bind mount exposed the files, but without a matching
location block external requests to /kernelrepo/ fell through to the SOC
app and returned HTML, so minions hit 'repomd.xml parser error'. Add a
/kernelrepo/ location mirroring /repo/.
 2026-06-26 12:02:49 -04:00
Josh Brower 024fece607 Tweak for nginx upgrade 2026-05-14 17:08:57 -04:00
Jason Ertel 8ea97e4af3 Merge pull request #15658 from Security-Onion-Solutions/jertel/wip 
do not attempt to redirect to a source map after login
 2026-03-23 09:55:31 -04:00
Jason Ertel 2f9a2e15b3 do not attempt to redirect to a source map after login 2026-03-23 09:48:06 -04:00
Josh Patterson 4dc377c99f DOCKER to DOCKERMERGED 2026-03-17 15:06:06 -04:00
Jason Ertel 1fcd8a7c1a API errors will no longer redirect 2026-03-13 16:53:38 -04:00
Josh Patterson b03b75315d Support additional alt names in web cert 2026-03-04 15:45:03 -05:00
Jason Ertel fcad82c4d4 prevent caching of main doc to ensure logged out detection is processed 2026-02-26 16:04:43 -05:00
Jason Ertel c1c568e94d do not allow auth redirection to login page or home page; that serves no purpose 2026-02-25 17:58:35 -05:00
Corey Ogburn ec27517bdd New Config Values 
New config values with annotations and defaults.

Updated Nginx config to allow streaming requests to not be buffered on the way to the client.
 2025-09-08 09:13:08 -06:00
Josh Patterson 3efe0eac13 Merge remote-tracking branch 'origin/2.4/dev' into vlb2 2025-06-06 08:54:23 -04:00
Jason Ertel 643afeeae7 enable STS for browser redirects 2025-06-05 16:02:27 -04:00
Josh Patterson 44a5b3b1e5 MANAGERHYPE setup is now complete! 2025-03-12 21:05:04 -04:00
Jason Ertel 19593cd771 use consistent ciphers across listeners 2025-02-18 12:17:50 -05:00
Jason Ertel 7dd64380cc Enable TLSv1.3 and use consistent ciphers across listeners 2025-02-18 11:48:00 -05:00
Jason Ertel 964bbe6aa5 additional web server security measures 2025-01-17 12:14:30 -05:00
Jason Ertel d4ed34d0ea connect 2024-11-11 11:56:19 -05:00
Jason Ertel d503c09ef2 connect 2024-10-24 15:45:18 -04:00
Jason Ertel 523ff66389 connect work 2024-10-16 13:44:01 -04:00
Jason Ertel 15c32f9103 connect routes 2024-10-16 12:33:14 -04:00
Jason Ertel 4913df2297 adjustments for support of PKCE OIDC 2024-10-01 08:54:14 -04:00
Mike Reeves 6e2c319e7e Fix http2 declaration 2024-09-09 19:42:04 -04:00
Mike Reeves eab7828bfe Formatting and add setting 2024-09-09 18:39:19 -04:00
DefensiveDepth d7ecad4333 Initial cut to remove Playbook and deps 2024-03-25 19:42:31 -04:00
Josh Brower 1847e5c3c0 Enable nginx on Fleet Node 2024-01-28 11:37:18 -05:00
Jason Ertel 44b855dd93 merge 2.4/dev 2023-10-11 13:35:16 -04:00
Mike Reeves c4fea9cb9d Update nginx.conf 2023-09-27 11:03:58 -04:00
Wes eeeae08ec8 /app/ to /app/dashboards/ 2023-09-21 18:39:06 +00:00
Wes f1d0db8171 /app to /kibana/app 2023-09-11 13:30:11 +00:00
Jason Ertel 8b3a38f573 resolve login page flicker 2023-08-01 16:30:24 -04:00
Jason Ertel 101e2e8ba1 do not redirect to API URLs when not logged in 2023-07-24 17:05:52 -04:00
Jason Ertel b129b4ceaa prepare for alt login 2023-07-14 17:03:20 -04:00
Corey Ogburn da7770a900 Allow an additional kratos endpoint through 
The /auth/self-service/errors route is used to lookup auth issues so the route must also be proxied to kratos.
 2023-07-07 12:47:55 -06:00
Jason Ertel 21a7b76352 webauthn 2023-06-14 13:33:31 -04:00
Mike Reeves edf531739c Suricata Airgap 2023-05-24 15:47:07 -04:00
m0duspwnens 7a4fea7a12 fix nginx merge conflicts 2023-05-15 11:40:12 -04:00
Jason Ertel 79a5f3a89f add missing slash 2023-05-08 15:55:00 -04:00
Jason Ertel da81d93930 adjust var name 2023-05-08 15:32:04 -04:00
Jason Ertel 44344612b7 adjust var name 2023-05-08 15:31:08 -04:00
Jason Ertel bd23d1ab7b implement selective rate limiting 2023-05-08 12:18:46 -04:00
Josh Brower 544fa824ea Initial cut for Artifact Registry 2023-05-02 14:17:59 -04:00
Mike Reeves 148b0b1c4c use hostnames please 2023-02-23 11:11:29 -05:00
Mike Reeves 3fed04a532 fix nginx config 2023-02-23 09:52:24 -05:00
Jason Ertel 0eec8b22a2 influx upgrade 2023-02-09 18:27:14 -05:00
Jason Ertel 0e50d36da6 upgrade influx 2023-02-09 16:18:04 -05:00
Jason Ertel 28eee48a7c influx upgrade 2023-02-08 20:38:29 -05:00
Jason Ertel 849e53e1eb upgrade influx 2023-02-08 17:40:27 -05:00
Jason Ertel c43e69ad93 influx upgrade 2023-02-08 15:57:14 -05:00
Jason Ertel ea0c3db8e1 upgrade influxdb 2023-02-08 13:23:45 -05:00
Mike Reeves cb2e46f275 NGINX fun 2022-09-19 16:11:49 -04:00