SITE_URL fix and NGINX update

Fix issue with SITE_URL on prod build Updated some NGINX configs
muuvmuuv · Feb 2, 2020 · fc396f0 · fc396f0
1 parent be58360
commit fc396f0
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 13 deletions.
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -19,8 +19,6 @@ services:
         consistency: cached
         source: ./public
         target: /var/www
-        volume:
-          nocopy: true
       - type: bind
         source: ./docker/nginx/certs/
         target: /etc/nginx/ssl/

diff --git a/docker/nginx/components/security.conf b/docker/nginx/components/security.conf
@@ -6,7 +6,7 @@ add_header X-XSS-Protection "1; mode=block" always;
 add_header X-Content-Type-Options "nosniff" always;
 add_header Referrer-Policy "strict-origin-when-cross-origin" always;
 add_header Content-Security-Policy "default-src * data: 'self' 'unsafe-inline' 'unsafe-eval'" always;
-add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
+add_header Strict-Transport-Security "max-age=63072000" always;
 add_header Feature-Policy "geolocation 'none';midi 'none';sync-xhr 'self';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';fullscreen 'self';payment 'none';";
 
 # ignore all dot files except `well-known`

diff --git a/docker/nginx/components/ssl.conf b/docker/nginx/components/ssl.conf
@@ -4,10 +4,9 @@
 ssl_certificate /etc/nginx/ssl/server.crt;
 ssl_certificate_key /etc/nginx/ssl/server.key;
 
-ssl_protocols TLSv1.2 TLSv1.3;
-ssl_prefer_server_ciphers on;
-ssl_ciphers   TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256;
-
-ssl_session_cache shared:SSL:20m;
-ssl_session_timeout 15m;
+ssl_session_timeout 1d;
+ssl_session_cache shared:MozSSL:10m;  # about 40000 sessions
 ssl_session_tickets off;
+
+ssl_protocols TLSv1.3;
+ssl_prefer_server_ciphers off;
diff --git a/gatsby-browser.js b/gatsby-browser.js
@@ -4,7 +4,7 @@
  * @see https://www.gatsbyjs.org/docs/browser-apis/
  */
 
-const { isProd, isDev } = require('./utils/environment')
+const { isDev } = require('./utils/environment')
 const { getLocale, getLanguage } = require('./src/utils/locale')
 
 const printCorporateMessage = require('./gatsby/browser/corporateMessage')

diff --git a/package.json b/package.json
@@ -1,19 +1,19 @@
 {
   "name": "marvin-digital",
-  "version": "3.15.0",
+  "version": "3.15.1",
   "private": true,
   "description": "Portfolio of and by Marvin Heilemann (@muuvmuuv)",
   "repository": "git@github.com:muuvmuuv/portfolio.git",
   "license": "UNLICENSED",
   "scripts": {
     "start": "npm run develop",
     "develop": "gatsby develop",
-    "build": "cross-env SITE_URL=\"https://marvin.lcl\" gatsby build",
+    "build": "gatsby build",
     "rebuild": "run-s clean build",
     "clean": "gatsby clean",
     "serve": "now dev --listen 59235",
     "−−−−−−−−−−−−−−−−  AUDITS/ANALYTICS  −−−−−−−−−−−−−−−−–": "",
-    "audit": "cross-env AUDIT=true run-s rebuild audit-server lighthouse audit-open",
+    "audit": "cross-env SITE_URL=\"https://marvin.lcl\" AUDIT=true run-s rebuild audit-server lighthouse audit-open",
     "audit-server": "make restart",
     "audit-open": "run-p audit:*",
     "audit-open:mobile": "node ./scripts/open-report.js lhr.mobile.html",