- Allow nginx_ssl_client_ca to be empty, otherwise the setting
optional_no_ca
does not seem to work correctly
- Remove raw certificate from nginx header. This can result in 400 errors in conjunction with unicorn (some versions). Use ssl_client_cert instead
- Remove
nginx_pass_ssl_client_cert
in favor of nginx_use_client_ssl - Add
nginx_server_ssl_ports
to specify which ports nginx should listen on - Remove
nginx_use_spdy
. Usenginx_use_http2
instead.
- Add support for client authentication using a root CA. Inspired by http://www.pandurang-waghulde.com/2014/06/client-side-ssl-certificate.html
- Auto-generate dhparams.pem if missing
- Add support for http2
- Fix unicorn:restart
- Improves SSL security and performance. Breaking changes with 3.4.0. Please read README.md
- Allow customizing paths for SSL certificate and key
- Use sudo to restart services
- Remove whitespace in template ERB files
- add
unicorn_env
option for passing environmental variables to unicorn (@rhomeister)
- bug fix: replaced non-existent
log_dir
withunicorn_log_dir
(@rhomeister)
- made nginx fail_timeout configurable (@rhomeister)
- added logrotate configuration for nginx logs (@rhomeister)
- added client SSL authentication (@rhomeister)
- make unicorn timeout configurable (@vicentllongo)
- allow 'PATCH' HTTP method in nginx_conf (@lonre)
- added SPDY support (@rhomeister)
- removed HTML 405 method from
nginx.conf
- add
server_name
directive for the port 80 ssl block in nginx_conf
- setup nginx and unicorn to use TCP if web and app roles are using different servers
- update default nginx log dir location to
/var/log/nginx
- enable setting unicorn app environment with
rails_env
option. Ifrails_env
is not set,stage
option is used as until now. (@bruno-) - add load balancing support (@rhomeister)
- config files are updated each time
setup
task is run (@rhomeister)
- add
nginx_location
option that specifies nginx installation dir (@jordanyaker)
- all the work is moved to the
setup
task
- add
sudo_upload!
helper method for easier uploads - improve the way how templates are handled
- refactor all unicorn and nginx paths to separate modules
- speed up
nginx:setup_ssl
task - small README update
- @bruno- all the v1.0.0 features