Commit Graph

27 Commits

Author SHA1 Message Date
Markus Heiser
cf2444a5ef Revert "[mod] caddy: update csp (#424)"
This reverts commit bc0cfa3d28.
2025-08-21 13:23:57 +02:00
Ivan Gabaldon
bc0cfa3d28 [mod] caddy: update csp (#424)
Since https://github.com/searxng/searxng/pull/5073 we add a script directly to the [`base.html`](https://github.com/searxng/searxng/blob/master/searx/templates/simple/base.html), we need `'unsafe-inline'`.
2025-08-18 21:59:55 +02:00
echo r"0xX4H" | rev
d9357aca09 [enh] add HSTS header (#419) 2025-08-15 16:31:02 +02:00
Ivan Gabaldon
8de6ea65ab [fix] container: remove static hashing (#410)
* [fix] container: remove static hashing

Allows browser cache heuristics to properly work.

Related https://github.com/searxng/searxng/pull/5006
Closes https://github.com/searxng/searxng-docker/issues/409

* [fix] container: don't revalidate at every request

As Granian no longer handles static files directly, the whole process goes through Flask, which apart from being slow, is resource intensive, even to serve HTTP 304 responses.
2025-07-19 10:19:17 +02:00
Ivan Gabaldon
8b75609524 [mod] container: replace uWSGI with Granian (#395)
To sync with https://github.com/searxng/searxng/pull/4820
2025-07-04 14:35:43 +02:00
Ivan Gabaldon
8c006d702f [fix] caddy: revise csp header (#397)
Relaxes some policies, there are obsolete options that are not currently in use that have been removed as well.

Closes https://github.com/searxng/searxng-docker/issues/371
Closes https://github.com/searxng/searxng-docker/issues/177
Closes https://github.com/searxng/searxng/issues/4304
2025-06-14 16:17:08 +02:00
Ivan Gabaldon
6022367de4 [mod] caddy: trusted proxies support (#396)
Early preparation for https://github.com/searxng/searxng/pull/4911
2025-06-14 15:21:40 +02:00
Ivan Gabaldon
9adeb8a6f2 revert setting env on Caddyfile (#341) 2025-02-15 21:21:43 +01:00
Ivan Gabaldon
5fc00a3285 Rework Caddyfile (#255)
* rework Caddyfile

* fix missing "public" directive

* features cleanup

Since this header is attached to each outgoing request the overall size is slightly increased by 300 bytes, we don't care if the site is allowed to play media in the background, so with the vast majority of features that have been added (and those that were already present)

* restore encode directive

Caddyserver actually did passthrough the precompressed resources served by uWSGI (Oops)

* merge upstream changes

* fix typo

---------

Co-authored-by: Émilien (perso) <4016501+unixfox@users.noreply.github.com>
2025-02-14 10:27:41 +01:00
ChillyKitty
8b2d017136 Update Caddyfile to Add X-Real-IP to fix bot detection
Bot detection complains about not having X-Real-IP which is required https://docs.searxng.org/src/searx.botdetection.html#id4 this adds the header and fixes the problem for me.
2023-06-20 02:45:04 +00:00
ononoki
f6fb825afd Add github new issue to CSP form-action
Make "Submit a new issue on Github including the above information" works
2022-05-18 08:55:18 +00:00
Alexandre Flament
0a1db38e21 Rely on searxng/settings.yml 2022-03-20 10:36:48 +01:00
Alexandre Flament
fe4a33a2bf Replace morty & filtron by redis & the limiter plugin 2022-02-25 23:11:13 +01:00
Alexandre Flament
38377d53c9 SearXNG 2021-10-01 18:13:17 +02:00
Zev Lee
da360b26b9 Add Permissions-Policy HTTP header to Caddyfile 2021-05-26 14:00:29 +00:00
Alexandre Flament
909201fef2 Remove old searx-checker
See https://github.com/searx/searx/pull/2419
2021-01-17 09:53:59 +01:00
Alexandre Flament
bdf5619765 [mod] upgrade to Caddy v2 (#44)
* Use docker image caddy:2-alpine
* Caddyfile: remove "limits 10KB"
* Caddyfile: URL /filtron/rules removes (filtron API still availabled on http://localhost:4041/rules )
* caddy storage are docker volumes (caddy-data and caddy-config). start.sh and stop.sh have been modified to keep these volumes.
* .env: Remove SEARX_PROTOCOL, SEARX_TLS, FILTRON_USER and FILTRON_PASSWORD variables.
* docker-compose.yml: filtron and morty listen on 127.0.0.1 (related to #38)

* Fix #37: settings ```SEARX_HOSTNAME=localhost:8888``` works as expected (https connection)
2020-07-13 08:12:32 +02:00
Dalf
92cdb70360 [mod] docker-compose.yaml: remove hardcoded IP 2020-04-10 10:45:58 +02:00
Dalf
f2e6ca4a61 [mod] allow fullscreen for videos 2019-08-06 12:44:08 +02:00
Dalf
00cc9aa906 [mod] content-security-policy: remove unsafe script
searx commit 8e62f7600f4582b913c92d56ffbafc22e37abe3b remove inline scripts for the oscar and simple themes
2019-08-06 12:42:19 +02:00
Dalf
566677c6c1 Caddyfile: Adjust Content-Security-Policy and Feature-Policy headers 2019-07-30 09:19:46 +02:00
Dalf
1b6563ffe0 Update Caddyfile
- Access-Control-Allow-Origin "*" only for /status, /config
- Add Strict-Transport-Security
- Modify Content-Security-Policy to allow https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com
- Limit request header/body to 10kb
2019-07-13 10:59:07 +02:00
Dalf
b64ec565e3 Update Content-Security-Policy header 2019-07-11 17:15:49 +02:00
Dalf
86f1f7e22d Mainly add searx/searx-checker
- Add searx/searx-checker image with automatic check everyday. Result https://${HOSTNAME}/status
- Cache /static files
- Add start.sh, stop.sh, update.sh
2019-07-09 18:05:05 +02:00
Dalf
6dea64a9dc Add filtron (configuration not done / checked)
Drop capabilities
2019-07-06 14:54:05 +02:00
Dalf
5d75c112ca Working Content-Security-Policy 2019-07-02 18:23:20 +02:00
Dalf
fe312fdae9 Initial commit 2019-07-01 16:26:45 +02:00