Commit Graph

21 Commits

Author SHA1 Message Date
Ivan Gabaldon
5d066a4c63
features cleanup
Since this header is attached to each outgoing request the overall size is slightly increased by 300 bytes, we don't care if the site is allowed to play media in the background, so with the vast majority of features that have been added (and those that were already present)
2024-08-23 22:12:45 +02:00
Ivan Gabaldon
d8d9e09705
fix missing "public" directive 2024-08-06 13:12:30 +02:00
Ivan Gabaldon
154c421271
rework Caddyfile 2024-08-06 12:50:09 +02:00
ChillyKitty
8b2d017136
Update Caddyfile to Add X-Real-IP to fix bot detection
Bot detection complains about not having X-Real-IP which is required https://docs.searxng.org/src/searx.botdetection.html#id4 this adds the header and fixes the problem for me.
2023-06-20 02:45:04 +00:00
ononoki
f6fb825afd
Add github new issue to CSP form-action
Make "Submit a new issue on Github including the above information" works
2022-05-18 08:55:18 +00:00
Alexandre Flament
0a1db38e21 Rely on searxng/settings.yml 2022-03-20 10:36:48 +01:00
Alexandre Flament
fe4a33a2bf Replace morty & filtron by redis & the limiter plugin 2022-02-25 23:11:13 +01:00
Alexandre Flament
38377d53c9 SearXNG 2021-10-01 18:13:17 +02:00
Zev Lee
da360b26b9
Add Permissions-Policy HTTP header to Caddyfile 2021-05-26 14:00:29 +00:00
Alexandre Flament
909201fef2 Remove old searx-checker
See https://github.com/searx/searx/pull/2419
2021-01-17 09:53:59 +01:00
Alexandre Flament
bdf5619765
[mod] upgrade to Caddy v2 (#44)
* Use docker image caddy:2-alpine
* Caddyfile: remove "limits 10KB"
* Caddyfile: URL /filtron/rules removes (filtron API still availabled on http://localhost:4041/rules )
* caddy storage are docker volumes (caddy-data and caddy-config). start.sh and stop.sh have been modified to keep these volumes.
* .env: Remove SEARX_PROTOCOL, SEARX_TLS, FILTRON_USER and FILTRON_PASSWORD variables.
* docker-compose.yml: filtron and morty listen on 127.0.0.1 (related to #38)

* Fix #37: settings ```SEARX_HOSTNAME=localhost:8888``` works as expected (https connection)
2020-07-13 08:12:32 +02:00
Dalf
92cdb70360 [mod] docker-compose.yaml: remove hardcoded IP 2020-04-10 10:45:58 +02:00
Dalf
f2e6ca4a61 [mod] allow fullscreen for videos 2019-08-06 12:44:08 +02:00
Dalf
00cc9aa906 [mod] content-security-policy: remove unsafe script
searx commit 8e62f7600f4582b913c92d56ffbafc22e37abe3b remove inline scripts for the oscar and simple themes
2019-08-06 12:42:19 +02:00
Dalf
566677c6c1 Caddyfile: Adjust Content-Security-Policy and Feature-Policy headers 2019-07-30 09:19:46 +02:00
Dalf
1b6563ffe0 Update Caddyfile
- Access-Control-Allow-Origin "*" only for /status, /config
- Add Strict-Transport-Security
- Modify Content-Security-Policy to allow https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com
- Limit request header/body to 10kb
2019-07-13 10:59:07 +02:00
Dalf
b64ec565e3 Update Content-Security-Policy header 2019-07-11 17:15:49 +02:00
Dalf
86f1f7e22d Mainly add searx/searx-checker
- Add searx/searx-checker image with automatic check everyday. Result https://${HOSTNAME}/status
- Cache /static files
- Add start.sh, stop.sh, update.sh
2019-07-09 18:05:05 +02:00
Dalf
6dea64a9dc Add filtron (configuration not done / checked)
Drop capabilities
2019-07-06 14:54:05 +02:00
Dalf
5d75c112ca Working Content-Security-Policy 2019-07-02 18:23:20 +02:00
Dalf
fe312fdae9 Initial commit 2019-07-01 16:26:45 +02:00