Juan Denis 02afdec9f0 feat(security): optional SSL/TLS hardening with Cloudflare-aware configs and HTTP fallback ...

- Add secure nginx config with TLS 1.2+, HSTS preload, CSP, and security headers
- Add insecure HTTP fallback config for users who cannot or do not want HTTPS
- Make installer best-effort SSL: try Let's Encrypt, fall back to HTTP without failing
- Preserve secure/insecure SSL choice across updates via /etc/serverkit/ssl-mode
- Support SERVERKIT_SKIP_SSL=1 to disable HTTPS entirely
- Add CAA record to default DNS zone template
- Harden generated per-app nginx configs with HSTS preload, CSP, and security headers
- Align Flask security middleware headers with nginx edge config

2026-06-19 16:13:06 -04:00

..

sites-available

feat(security): optional SSL/TLS hardening with Cloudflare-aware configs and HTTP fallback

2026-06-19 16:13:06 -04:00

nginx.conf

feat(security): optional SSL/TLS hardening with Cloudflare-aware configs and HTTP fallback

2026-06-19 16:13:06 -04:00