Timothy Kim timothykim
  • Joined on 2025-05-09
timothykim pushed to main at hantim/hantim-server 2026-03-20 19:50:46 -04:00
de1d60b1db remove standalone certbot fallback, fail on missing certs
timothykim pushed to main at hantim/hantim-server 2026-03-20 17:01:37 -04:00
c8c79a542a re-exec deploy.sh after git pull to pick up changes
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:57:10 -04:00
b2bb8fa5eb clarify default server block comment
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:55:55 -04:00
729eadee33 use *.*.conf glob to match only domain conf files for cert issuance
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:53:50 -04:00
4b39eaaf06 skip default server block in cert issuance, remove ssh debug lines
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:51:11 -04:00
085b0bdd1b clean up trailing newline in nginx.conf
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:43:55 -04:00
020e7b2950 retrigger nginx deploy for host key test
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:41:28 -04:00
9a9df25742 retrigger nginx deploy for host key debug
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:40:39 -04:00
6e2ec87ccf debug host key pinning in nginx workflow
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:38:42 -04:00
77e08f34cf retrigger nginx deploy for host key test
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:35:37 -04:00
061213bf7e retrigger nginx deploy for host key test
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:33:17 -04:00
03e45dc6f2 trigger nginx deploy to test host key pinning
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:31:56 -04:00
16ea39811d document deploy host key variable in readme
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:31:05 -04:00
7daf7a267b pin ssh host key in all workflows
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:25:24 -04:00
5abfca19b3 restrict envsubst to expected variables only
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:20:02 -04:00
9e3996a72b remove security.md from repo, add to gitignore
163aefddee add default server block to drop unknown host headers
3a1ef3a167 fix tls tests to load system ca certificates
cce9b5c4c4 add ssl/tls hardening to nginx
2bcf67dcc4 fetch secrets by uuid instead of listing all
Compare 11 commits »
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:12:07 -04:00
7ba8921b24 add default server block to drop unknown host headers
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:07:34 -04:00
33aef6553d fix tls tests to load system ca certificates
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:05:43 -04:00
10133867be add ssl/tls hardening to nginx
timothykim pushed to main at hantim/hantim-server 2026-03-20 16:00:25 -04:00
4a7e2bf5dd update security.md with fixed and accepted items