dandds 26cc4ce79a Disable cipher export for TLS negotiation. ...

In order to meet compliance requirements, this adds the EXPORT option to
NGINX's ssl_cipher config. Extended discussion here:

https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html

2020-01-29 16:48:33 -05:00

..

keyvault

Initial FlexVol Setup

2019-11-25 11:19:55 -05:00

aadpodidentity.yml

Initial FlexVol Setup

2019-11-25 11:19:55 -05:00

acme-challenges.yml

Configure K8s deployment for easy LetsEncrypt verification.

2019-11-14 09:51:35 -05:00

atst-envvars-configmap.yml

Set SESSION_COOKIE_SECURE for deployed environments.

2020-01-29 14:39:56 -05:00

atst-nginx-configmap.yml

Update NGINX config to use supplied domains.

2020-01-07 06:12:56 -05:00

atst-worker-envvars-configmap.yml

K8s YAML integer values need to be quoted.

2019-12-13 12:11:31 -05:00

autoscaling.yml

Try to fit two web processes per node

2020-01-20 15:41:52 -05:00

azure_monitor_rbac.yml

Kubernetes configuration to allow Azure Monitor to collect logs.

2019-10-11 11:24:53 -04:00

azure.yml

Disable container privilege escalation.

2020-01-28 14:10:55 -05:00

crls-sync.yaml

Disable container privilege escalation.

2020-01-28 14:10:55 -05:00

kustomization.yaml

Create a horizontal pod autoscaler

2020-01-16 10:16:54 -05:00

nginx-client-ca-bundle.yml

Keep client CAs as a K8s ConfigMap.

2019-11-08 14:28:45 -05:00

nginx-snippets.yml

Disable cipher export for TLS negotiation.

2020-01-29 16:48:33 -05:00

pgsslrootcert.yml

Make Postgres SSL connection configurable.

2019-10-17 16:05:19 -04:00

storage-class.yml

Use kustomize and envsubst to generalize k8s config.

2019-11-08 14:28:45 -05:00

uwsgi-config.yml

uWSGI plugin config changes.

2020-01-09 11:36:00 -05:00

volume-claim.yml

Use kustomize and envsubst to generalize k8s config.

2019-11-08 14:28:45 -05:00