SuperSeriousBusiness/GoToSocial
1
1
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial synced 2025-06-05 21:59:39 +02:00
Code Issues Projects Releases Wiki Activity

[docs] Made Advanced its own section (#1883)

Browse Source 
* [docs] Made Advanced its own section

This splits the Advanced page off from the Getting Started guide and
makes it its own thing. It now has some additional sub-sections for
bigger topics like caching and enhanced security. This also moves
tracing from Getting Started to Advanced as that feels like a more
appropriate location for it.

The enhanced security looks a little silly with a single section, but I
have guides pending for firewall configurations and I'd also like to
consolidate our how to provision TLS certificates in there as we repeat
this information multiple times.

* [docs] Fix all my spelling errors

* [docs] Inline the links in sandboxing
This commit is contained in:
Daenney
2023-06-12 15:38:53 +02:00
committed by GitHub
parent 5d19fb1b2f
commit 4990099fde
12 changed files with 418 additions and 453 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
docs/getting_started/reverse_proxy/nginx.md
View File

@@ -57,7 +57,7 @@ In the above commands, replace `yourgotosocial.url` with your actual GoToSocial
The file you're about to create should look like this:
```nginx.conf
```nginx
server {
listen 80;
listen [::]:80;
@@ -141,15 +141,20 @@ Now start GoToSocial again:
sudo systemctl start gotosocial
```
## Security hardening
If you want to harden up your NGINX deployment with advanced configuration options, there are many guides online for doing so ([for example](https://beaglesecurity.com/blog/article/nginx-server-security.html)). Try to find one that's up to date. Mozilla also publishes best-practice SSL configuration [here](https://ssl-config.mozilla.org/).
## Results
You should now be able to open the splash page for your instance in your web browser, and will see that it runs under https!
If you open the NGINX config again, you'll see that Certbot added some extra lines to it.
**Note**: This may look a bit different depending on the options you chose while setting up Certbot, and the NGINX version you're using.
!!! note
This may look a bit different depending on the options you chose while setting up Certbot, and the NGINX version you're using.
```nginx.conf
```nginx
server {
server_name example.org;
location / {
@@ -183,4 +188,4 @@ server {
}
```
A number of additional configurations for nginx, including static asset serving and caching, are documented in the [Advanced](../advanced.md) section of our documentation.
A number of additional configurations for nginx, including static asset serving and caching, are documented in the [Advanced](../../advanced/index.md) section of our documentation.