186 Commits

Author	SHA1	Message	Date
Corey Ogburn	ec27517bdd	New Config Values ... New config values with annotations and defaults. Updated Nginx config to allow streaming requests to not be buffered on the way to the client.	2025-09-08 09:13:08 -06:00
Josh Patterson	3efe0eac13	Merge remote-tracking branch 'origin/2.4/dev' into vlb2	2025-06-06 08:54:23 -04:00
Jason Ertel	643afeeae7	enable STS for browser redirects	2025-06-05 16:02:27 -04:00
Josh Patterson	8c37a4454c	merge and fix conflicts	2025-05-06 11:55:42 -04:00
Josh Patterson	1931de2e52	copy so_agent-installers to nsm for nginx	2025-05-05 12:40:56 -04:00
Josh Patterson	102ddaf262	Merge remote-tracking branch 'origin/2.4/dev' into vlb2	2025-04-29 08:18:25 -04:00
Mike Reeves	5f45327372	Update enabled.sls	2025-04-28 08:39:26 -04:00
Mike Reeves	ac8ac23522	Update enabled.sls	2025-04-28 08:36:43 -04:00
Josh Patterson	44a5b3b1e5	MANAGERHYPE setup is now complete!	2025-03-12 21:05:04 -04:00
Jason Ertel	0047246cf2	reduce stdout verbosity	2025-03-04 10:55:12 -05:00
Jason Ertel	19593cd771	use consistent ciphers across listeners	2025-02-18 12:17:50 -05:00
Jason Ertel	7dd64380cc	Enable TLSv1.3 and use consistent ciphers across listeners	2025-02-18 11:48:00 -05:00
Jason Ertel	964bbe6aa5	additional web server security measures	2025-01-17 12:14:30 -05:00
Joshua Brower	dcdf31eee8	Fix folder perm	2025-01-10 16:15:17 -05:00
Joshua Brower	bcb92b63e3	Move json files to container image	2025-01-09 10:58:40 -05:00
Joshua Brower	6fa11a38ef	Update defaults	2025-01-07 13:14:50 -05:00
defensivedepth	9475211417	Refactor Navigator for Detections	2024-12-09 16:31:51 -05:00
Jason Ertel	d4ed34d0ea	connect	2024-11-11 11:56:19 -05:00
Jason Ertel	d503c09ef2	connect	2024-10-24 15:45:18 -04:00
Jason Ertel	523ff66389	connect work	2024-10-16 13:44:01 -04:00
Jason Ertel	15c32f9103	connect routes	2024-10-16 12:33:14 -04:00
Jason Ertel	4913df2297	adjustments for support of PKCE OIDC	2024-10-01 08:54:14 -04:00
Jason Ertel	cce9e162d4	remove colon to avoid yaml parsing problems	2024-09-16 15:30:14 -04:00
Jason Ertel	217bb388a0	Clarify enabled settings	2024-09-16 10:05:17 -04:00
Mike Reeves	6e2c319e7e	Fix http2 declaration	2024-09-09 19:42:04 -04:00
Mike Reeves	eab7828bfe	Formatting and add setting	2024-09-09 18:39:19 -04:00
DefensiveDepth	d7ecad4333	Initial cut to remove Playbook and deps	2024-03-25 19:42:31 -04:00
m0duspwnens	2f03248612	use different nginx defaults for so-fleet node hosting artifacts	2024-01-31 16:25:09 -05:00
Josh Brower	afa98fa147	update artifacts URL automatically	2024-01-28 14:20:52 -05:00
Josh Brower	1847e5c3c0	Enable nginx on Fleet Node	2024-01-28 11:37:18 -05:00
Josh Brower	b8e555e913	Upgrade Navigator and fix Playbook layer	2024-01-10 21:16:59 -05:00
Jason Ertel	44b855dd93	merge 2.4/dev	2023-10-11 13:35:16 -04:00
Mike Reeves	c4fea9cb9d	Update nginx.conf	2023-09-27 11:03:58 -04:00
Wes	eeeae08ec8	/app/ to /app/dashboards/	2023-09-21 18:39:06 +00:00
Wes	f1d0db8171	/app to /kibana/app	2023-09-11 13:30:11 +00:00
Jason Ertel	8b3a38f573	resolve login page flicker	2023-08-01 16:30:24 -04:00
Jason Ertel	d3e83d154b	Merge branch '2.4/t dev' into kilo	2023-07-27 10:20:22 -04:00
Josh Brower	2b38bc778d	Upgrade Nav	2023-07-25 12:24:23 -04:00
Jason Ertel	101e2e8ba1	do not redirect to API URLs when not logged in	2023-07-24 17:05:52 -04:00
Josh Brower	510900e640	Update & Fix Navigator	2023-07-24 13:56:22 -04:00
Jason Ertel	b129b4ceaa	prepare for alt login	2023-07-14 17:03:20 -04:00
Corey Ogburn	da7770a900	Allow an additional kratos endpoint through ... The /auth/self-service/errors route is used to lookup auth issues so the route must also be proxied to kratos.	2023-07-07 12:47:55 -06:00
m0duspwnens	eeaf077baf	dont need the unless for ssl since using x509v2 now	2023-06-28 15:02:09 -04:00
m0duspwnens	120d21c0da	use minion id instead of hostname for ca_server in nginx state	2023-06-28 13:52:30 -04:00
m0duspwnens	66457ad8f8	use watch_in instead of watch	2023-06-28 12:27:14 -04:00
m0duspwnens	69670c481d	fix require logic for nginx container	2023-06-28 11:32:08 -04:00
m0duspwnens	cae011babb	force bool for nginx ssl replace_cert	2023-06-28 11:30:36 -04:00
m0duspwnens	02ea939abc	watch crt and key for nginx container	2023-06-28 11:11:20 -04:00
m0duspwnens	be028aa23e	define ca_server for nginx.ssl	2023-06-28 10:58:13 -04:00
m0duspwnens	24b7f7a7ce	move replace_cert under ssl for nginx defaults	2023-06-28 10:32:16 -04:00