Kapisi/roles/WebServer/README.md

28 lines
2.2 KiB
Markdown
Raw Permalink Normal View History

2020-10-08 16:33:19 -05:00
Having some information be publicly accessible is useful to the network -- it's how we can be available to new people. Because HTTPS is the protocol of choice today, the WebServer is our vector.
# Etymology
The WebServer serves content on the Web -- its name is simple to match the function.
# Relevant Files and Software
2022-09-15 14:23:34 -05:00
Configuration files live in [/opt/openresty/nginx/](file:///opt/openresty/nginx), including ciphersuites, URI redirection, and pathing. It can be validated with the `openresty -t` command. Webserver isn't meant to hold files itself -- it generally proxies and SSL-terminates connections for other apps, using location-based hosting and fastcgi.
2020-10-08 16:33:19 -05:00
Of security note are the default.csp.conf and sec.conf files in [the conf folder](/AniNIX/Ubiqtorate/src/branch/main/roles/WebServer/files/conf). These files include our security remediations, as we have been able to get them to work with our apps.
2020-10-08 16:33:19 -05:00
**Please note:** We offer a redirect on www.aninix.net and http://aninix.net:80/ only as a legacy convenience as browsers do not yet support 443 by default -- no data is transmitted on these. When the webhosting community acknowledges the death of the empty www. subdomain and the necessity of encryption, we will drop these. However, for usability, we include them for now.
## Apps
We include `files/apps` here for apps that are too small to warrant their own project. These include things like:
* AniNIX/Scratch -- a scratchpad in cache
* AniNIX/BlackPage -- a blackout page for the monitor
* AniNIX/WhatIsMyIP -- an IP-returning service, reducing the load on upstream [WhatIsMyIP](https://whatismyip.com)
These apps must be short -- a hook is in place to ensure this.
2020-10-08 16:33:19 -05:00
# Available Clients
2022-09-15 14:23:34 -05:00
Users should use [Chrome](http://google.com/chrome/browser/desktop/) where possible, though other standard browsers will work. [AniNIX/Maat](https://maat.aninix.net) builds google-chrome as a package for ArchLinux.
2020-10-08 16:33:19 -05:00
# Equivalents or Competition
2022-09-15 14:23:34 -05:00
Hosting services like [GoDaddy](https://godaddy.com) and [FreeHostia](http://freehostia.com/) will provide hosting services for web pages. Content management can be done with systems like WordPress, but these solutions are wildly insecure, even if they can be convenient.