Commit graph

328 commits

Author SHA1 Message Date
Samuel Clay
4a6c0996ab Adding HSTS ssl header back in, but wiht a max age of 0 to ensure cache busting. 2014-10-29 12:12:29 -07:00
Samuel Clay
984c31d928 Updating HAProxy. 2014-10-27 16:32:10 -07:00
Samuel Clay
de95d653b4 Fixing share bookmarklet by forcing https. 2014-10-27 13:42:14 -07:00
Samuel Clay
8b782cb47e Upgrading SSL certs to support HSTS and FS. 2014-10-23 10:44:16 -07:00
Samuel Clay
e35808f8bf Fixing haproxy and gunicorn url length issues. This ones for @misc. 2014-10-01 15:40:33 -07:00
Samuel Clay
1b6941aa57 Upgrading all servers to ubuntu 14.10 LTS. Fixing bashocalypse. 2014-09-24 17:00:33 -07:00
Samuel Clay
87620eb4e1 Adding monit for original page server for when it crashes. 2014-09-18 10:12:27 -07:00
Samuel Clay
efc793b1ad Fixing pip requirements conflicts. 2014-08-22 08:17:53 -07:00
Samuel Clay
6e5848714e Merge pull request #434 from quad/patch-1
Prefer forward secure and ECC cipher suites
2014-07-13 15:00:38 -07:00
Samuel Clay
a73e8830ca Updating requests to fix openssl errors. 2014-05-27 12:55:02 -07:00
Samuel Clay
0db2a1d110 Revert "Ripping out SNI/openssl/requests latest. Turns out pyOpenSSL barfs on a ton of pages."
This reverts commit 177b8aea09.
2014-05-22 15:09:08 -07:00
Samuel Clay
177b8aea09 Ripping out SNI/openssl/requests latest. Turns out pyOpenSSL barfs on a ton of pages. 2014-05-22 15:06:16 -07:00
Samuel Clay
02936d6878 Merge pull request #536 from Lukasa/sni
Add support for SNI and update requests.
2014-05-22 11:00:41 -07:00
Samuel Clay
00b4b241ac Gunicorn x-forwarded-for 2014-05-22 09:32:42 -07:00
Samuel Clay
f36e7ceae3 Adding RealIP to nginx/gunicorn. 2014-05-22 09:21:47 -07:00
Samuel Clay
f39417d0c6 Updating lxml to 3.3.5 to fix two big html diffing issues: whitespace being removed between links, and newlines being removed in <pre> tags. 2014-05-15 12:24:16 -07:00
Cory Benfield
65bbb3f1c1 Add support for SNI and update requests. 2014-05-13 19:33:08 +01:00
Samuel Clay
90876879e3 Reverting to http for original page server as it's not equipped. 2014-04-23 12:50:43 -07:00
Samuel Clay
cd4a7b8693 Fixing river feed header fonts. 2014-04-23 12:28:46 -07:00
Samuel Clay
1f299eb941 Turning indexing on. 2014-04-22 18:37:32 -07:00
Samuel Clay
47256cff2f Task for scheduling search indexing. 2014-04-22 18:33:20 -07:00
Samuel Clay
0d5eb96ade Parallelizing search indexing. Adding task to handle parallelization. 2014-04-22 18:33:08 -07:00
Samuel Clay
cdf8b8f75c Updating reqs. 2014-04-22 15:19:11 -07:00
Samuel Clay
d8f035fefd Adding search indexer task. 2014-04-22 15:16:00 -07:00
Samuel Clay
c50808a382 Upping django_ext version. 2014-04-21 16:15:23 -07:00
Samuel Clay
5120ed1890 Adding six requirement. 2014-04-11 16:57:50 -07:00
Samuel Clay
073098750c Swapping out haystack for pyes. 2014-04-11 15:40:58 -07:00
Samuel Clay
195eb8d97c No req for psycopg. 2014-04-03 15:27:25 -07:00
Samuel Clay
f6762d2aa3 Upping stripe to 1.12.2. 2014-04-03 15:24:52 -07:00
Samuel Clay
dbf146b330 Psycopg2 requirement. 2014-02-14 17:42:58 -08:00
Samuel Clay
5fa400a3e3 Upgrading pip as part of pip req. 2014-01-21 17:30:20 -08:00
Samuel Clay
7f2a3c4b1a Upping pip. 2014-01-21 17:27:15 -08:00
Samuel Clay
c589212e30 Adding pip updater. 2014-01-21 16:56:03 -08:00
Samuel Clay
7af614a324 Initial oauth provider commit. 2014-01-15 14:29:35 -08:00
Samuel Clay
a79d0fa6be Adding monit for work server. 2013-12-22 15:17:13 -08:00
Scott Robinson
ed4bc34288 Prefer forward secure and ECC cipher suites
I saw https://getsatisfaction.com/newsblur/topics/weak_crypto_available and realized a pull request might better communicate the ease in this improvement.

Configuration changes guided by https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy

Test results can be confirmed with https://www.ssllabs.com/ssltest/analyze.html?d=newsblur.com
2013-11-16 17:51:01 +08:00
Samuel Clay
db74119842 Using timezone-aware relative dates (Today, Yesterdays). 2013-11-06 23:39:28 -08:00
Samuel Clay
56baf288ef Merge branch 'master' into ios7
* master:
  Fixing mongo btree munin graph.
2013-10-23 14:51:15 -07:00
Samuel Clay
181a3f5174 Fixing mongo btree munin graph. 2013-10-23 13:33:24 -07:00
Samuel Clay
c3f251782f Merge branch 'master' into ios7
* master:
  Fixing a couple small bugs.
  Fixing subs for socialsubs.
  Fixing unread hashes on single feeds.
  Fixing redis issue with existing keys beyond a RESTORE.
  Fixing socialsub issue.
  Adding options popover (and read_filter) to all shared stories and global shared stories.
  Only trimming active users.
  Fixing issue with wrong subs.
  Fixing trim user stories on malformed story hash.
  Fixing missig unread ranked stories cache.
  Major refactoring of social blurblog. Also adding a new trimmer, but keeping it turned off.
  Fixing rstats.
2013-10-07 16:39:31 -07:00
Samuel Clay
07c5f95c36 Fixing a couple small bugs. 2013-10-07 16:16:38 -07:00
Samuel Clay
e244641185 Finishing saving of stories with gestures. Works with errors, but not offline. 2013-10-01 14:24:44 -07:00
Samuel Clay
0679d7d956 Adding redis to monit. 2013-09-17 15:56:16 -07:00
Samuel Clay
40e01c6860 Fixing iOS issue on river terminating prematurely. 2013-09-10 16:09:33 -07:00
Samuel Clay
7706711143 Moving from X-Real-IP to X-Forwarded-For. 2013-09-06 16:26:02 -07:00
Samuel Clay
c238973417 Correct haproxy config to account for new http layer 7 health checks from nginx. 2013-08-13 16:27:56 -07:00
Samuel Clay
9dc9e4a948 Cleaning up haproxy debug, logrotate. 2013-08-13 15:45:40 -07:00
Samuel Clay
888778b670 Adding nginx health check. Fixing ssh keys. 2013-07-30 19:16:12 -07:00
Samuel Clay
f9dd57a531 Adding nginx haproxy health check. 2013-07-30 18:28:53 -07:00
Samuel Clay
c286c0ed91 Adding haproxy exception for health check. 2013-07-30 18:24:34 -07:00