Commit Graph

186 Commits

Author SHA1 Message Date
Corey Ogburn ec27517bdd New Config Values
New config values with annotations and defaults.

Updated Nginx config to allow streaming requests to not be buffered on the way to the client.
2025-09-08 09:13:08 -06:00
Josh Patterson 3efe0eac13 Merge remote-tracking branch 'origin/2.4/dev' into vlb2 2025-06-06 08:54:23 -04:00
Jason Ertel 643afeeae7 enable STS for browser redirects 2025-06-05 16:02:27 -04:00
Josh Patterson 8c37a4454c merge and fix conflicts 2025-05-06 11:55:42 -04:00
Josh Patterson 1931de2e52 copy so_agent-installers to nsm for nginx 2025-05-05 12:40:56 -04:00
Josh Patterson 102ddaf262 Merge remote-tracking branch 'origin/2.4/dev' into vlb2 2025-04-29 08:18:25 -04:00
Mike Reeves 5f45327372 Update enabled.sls 2025-04-28 08:39:26 -04:00
Mike Reeves ac8ac23522 Update enabled.sls 2025-04-28 08:36:43 -04:00
Josh Patterson 44a5b3b1e5 MANAGERHYPE setup is now complete! 2025-03-12 21:05:04 -04:00
Jason Ertel 0047246cf2 reduce stdout verbosity 2025-03-04 10:55:12 -05:00
Jason Ertel 19593cd771 use consistent ciphers across listeners 2025-02-18 12:17:50 -05:00
Jason Ertel 7dd64380cc Enable TLSv1.3 and use consistent ciphers across listeners 2025-02-18 11:48:00 -05:00
Jason Ertel 964bbe6aa5 additional web server security measures 2025-01-17 12:14:30 -05:00
Joshua Brower dcdf31eee8 Fix folder perm 2025-01-10 16:15:17 -05:00
Joshua Brower bcb92b63e3 Move json files to container image 2025-01-09 10:58:40 -05:00
Joshua Brower 6fa11a38ef Update defaults 2025-01-07 13:14:50 -05:00
defensivedepth 9475211417 Refactor Navigator for Detections 2024-12-09 16:31:51 -05:00
Jason Ertel d4ed34d0ea connect 2024-11-11 11:56:19 -05:00
Jason Ertel d503c09ef2 connect 2024-10-24 15:45:18 -04:00
Jason Ertel 523ff66389 connect work 2024-10-16 13:44:01 -04:00
Jason Ertel 15c32f9103 connect routes 2024-10-16 12:33:14 -04:00
Jason Ertel 4913df2297 adjustments for support of PKCE OIDC 2024-10-01 08:54:14 -04:00
Jason Ertel cce9e162d4 remove colon to avoid yaml parsing problems 2024-09-16 15:30:14 -04:00
Jason Ertel 217bb388a0 Clarify enabled settings 2024-09-16 10:05:17 -04:00
Mike Reeves 6e2c319e7e Fix http2 declaration 2024-09-09 19:42:04 -04:00
Mike Reeves eab7828bfe Formatting and add setting 2024-09-09 18:39:19 -04:00
DefensiveDepth d7ecad4333 Initial cut to remove Playbook and deps 2024-03-25 19:42:31 -04:00
m0duspwnens 2f03248612 use different nginx defaults for so-fleet node hosting artifacts 2024-01-31 16:25:09 -05:00
Josh Brower afa98fa147 update artifacts URL automatically 2024-01-28 14:20:52 -05:00
Josh Brower 1847e5c3c0 Enable nginx on Fleet Node 2024-01-28 11:37:18 -05:00
Josh Brower b8e555e913 Upgrade Navigator and fix Playbook layer 2024-01-10 21:16:59 -05:00
Jason Ertel 44b855dd93 merge 2.4/dev 2023-10-11 13:35:16 -04:00
Mike Reeves c4fea9cb9d Update nginx.conf 2023-09-27 11:03:58 -04:00
Wes eeeae08ec8 /app/ to /app/dashboards/ 2023-09-21 18:39:06 +00:00
Wes f1d0db8171 /app to /kibana/app 2023-09-11 13:30:11 +00:00
Jason Ertel 8b3a38f573 resolve login page flicker 2023-08-01 16:30:24 -04:00
Jason Ertel d3e83d154b Merge branch '2.4/t dev' into kilo 2023-07-27 10:20:22 -04:00
Josh Brower 2b38bc778d Upgrade Nav 2023-07-25 12:24:23 -04:00
Jason Ertel 101e2e8ba1 do not redirect to API URLs when not logged in 2023-07-24 17:05:52 -04:00
Josh Brower 510900e640 Update & Fix Navigator 2023-07-24 13:56:22 -04:00
Jason Ertel b129b4ceaa prepare for alt login 2023-07-14 17:03:20 -04:00
Corey Ogburn da7770a900 Allow an additional kratos endpoint through
The /auth/self-service/errors route is used to lookup auth issues so the route must also be proxied to kratos.
2023-07-07 12:47:55 -06:00
m0duspwnens eeaf077baf dont need the unless for ssl since using x509v2 now 2023-06-28 15:02:09 -04:00
m0duspwnens 120d21c0da use minion id instead of hostname for ca_server in nginx state 2023-06-28 13:52:30 -04:00
m0duspwnens 66457ad8f8 use watch_in instead of watch 2023-06-28 12:27:14 -04:00
m0duspwnens 69670c481d fix require logic for nginx container 2023-06-28 11:32:08 -04:00
m0duspwnens cae011babb force bool for nginx ssl replace_cert 2023-06-28 11:30:36 -04:00
m0duspwnens 02ea939abc watch crt and key for nginx container 2023-06-28 11:11:20 -04:00
m0duspwnens be028aa23e define ca_server for nginx.ssl 2023-06-28 10:58:13 -04:00
m0duspwnens 24b7f7a7ce move replace_cert under ssl for nginx defaults 2023-06-28 10:32:16 -04:00