Apache -> Nginx? about sovereign HOT 26 CLOSED

I'm in favor. I prefer nginx to Apache; this was one thing that made me debate using sovereign vs rolling my own solution.

from sovereign.

In January I've played around with porting the apace configs to nginx on a freshly installed server with the jessie-playbooks and have got a working set now, but I currently don't have time to put those configs into the playbook. Testing is a pain when jessie isn't fully supported yet. I'd wait until the jessie transition is finished and put them into the playbook afterwards.

from sovereign.

Agreed, NGINX is technically superior in most parts and certainly less resource hungry. Even if VPS memory costs are coming down, there is still never enough since we always want to do more with them!

from sovereign.

@alexanderadam yes, I've started writing my own playbook which uses a nginx role which is pretty easy to use and works well. I can recommend that if you want to integrate nginx into your playbooks.

from sovereign.

ah, well, the email config is not yet there. I wasn't thinking of uploading the playbook since it is written quite messy. I will see if I can clean it up and upload it but don't expect it to happen in the near future. Even if it will be uploaded I doubt you will be able to use it as a replacement for sovereign since it heavily relies on zerotier and spreads the configuration on multiple servers.

from sovereign.

Whats the status on this, is there a reason it was closed? It seems there is still a desire by users for nginx over apache. @aminb as for Mailu if that was a set of ansible scripts instead of a docker container I would easily consider using it.

from sovereign.

Good baseline for nginx security

from sovereign.

Alex,

Have a look at my ansible repo (https://github.com/pjan/the-ansibles). It includes an extensive/configurable nginx role (add and delete modules, ...).

One thing to bear in mind, is that switching to nginx somehow will complicate the owncloud setup, but nothing that can't be done

BTW: Based on the many roles I already had, I took your sovereign for a twist (https://github.com/pjan/the-ansibles/blob/master/docs/cloudbox.md) and believe it's a bit more fool-proof / easier to start off with for the general crowd (owncloud is however not included). (No remarks here though, as it was mainly a personal exercise based on what I already had + feel free to get some inspiration)

from sovereign.

+1 on nginx
@nanoxd nice ressource

from sovereign.

+1. But be aware that SPDY requires special compilation flags, and so will generally be difficult.
Also, another set of standard settings for nginx from the Mozilla project:
https://wiki.mozilla.org/Security/Server_Side_TLS#Nginx

from sovereign.

+1 on nginx, because it does the whole reverse proxy thing too, which is useful when Docker-ising applications.

from sovereign.

+1

from sovereign.

+1 on nginx, because it does the whole reverse proxy thing too,

So do Apache, lighttpd, and many other web servers.

from sovereign.

+1 to replace Apache with nginx.

from sovereign.

I initially was in favor of switching -- but have since changed my mind. Memory prices in the cloud are coming down and apache has solid documentation.

If there are good reasons beyond memory usage to switch, I'd reconsider.

from sovereign.

+1

from sovereign.

+1 for nginx support!

from sovereign.

Not to sound like a broken record, but: I'm open to a pull request. Apache httpd has worked well for most Sovereign users. As @ariddell pointed out, higher-memory VPS instances have come down in price.

from sovereign.

I'm curious to know what people think of switching from Apache to Nginx, more than a year later after the last comment on this issue.

It was mentioned in the LetsEncrypt discussion over at #451, and also with PR #526 aiming to modularize sovereign I thought it might be a good time to give this a second thought.

From what I've gathered, @ariddell is in favor of switching to Nginx, and @neuhaus doesn't mind it.

I'd like to see what everyone thinks of this.

P.S. I'm using Nginx on my server (along with owncloud) and can probably help with some of the virtual host files.

from sovereign.

I'm in favor of switching to nginx.

from sovereign.

@tynsh do you have any fork or something were we could support you somehow?

from sovereign.

Unfortunately I've lost that config when I've wiped my server without having a backup :-(

Since I no longer use sovereign I doubt I will try again, sorry.

from sovereign.

@tynsh what a pity. If I may ask: do you use an alternative you could recommend?

from sovereign.

@tynsh does it integrate a full email config similar to the one in sovereign as well? You don't have it public on GitHub yet, right?

from sovereign.

@al3x I totally understand that there are reasons for you not to solve this issue not by yourself.

However, if I interpreted your comment correctly, closing this issue was not what you really intended to do. Because you are actually open to get this issue solved. So as this issue isn't rejected nor solved it should be still open so nobody can misinterpret the state of this issue (as rejected or closed).

PS: independent from that I just wanted to mention that it's absolutely awesome what you've done

from sovereign.

For others interested in an alternative to some of Sovereign's functionality (mail, calendar and contacts), I'd recommend taking a look at Mailu, which I've been happily using for a few months now and haven't had any issues with it.

from sovereign.