New TurnKey Nginx Php Fastcgi version (17.0)

Changes:

  • Updated all relevant Debian packages to Bullseye/11 versions; including PHP 7.4.
  • Now using default Debian PHP-FPM config (previously we supplied our own custom fastcgi service and setup).
  • Provide predefined dh_params (via 'turnkey-make-ssl-cert' where relevant) as per RFC7919 - part of #1653.
  • Use default Debian PHP-FPM config (previously we supplied our own custom fastcgi service and setup).
  • Prepare HSTS and OCSP stapling configuration (not fully enabled by default - as requires valid SSL/TLS cert).
  • Updated version of mysqltuner script.
  • Refactored config files to be consistent with upstream/Debian defaults.
  • Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance.

Links

New TurnKey node.js version (17.0)

Changes:

  • Updated NodeJS to latest LTS v16.13.2.
  • Updated all relevant Debian packages to Bullseye/11 versions; including PHP 7.4.
  • Now using default Debian PHP-FPM config (previously we supplied our own custom fastcgi service and setup).
  • Provide predefined dh_params (via 'turnkey-make-ssl-cert' where relevant) as per RFC7919 - part of #1653.
  • Use default Debian PHP-FPM config (previously we supplied our own custom fastcgi service and setup).
  • Prepare HSTS and OCSP stapling configuration (not fully enabled by default - as requires valid SSL/TLS cert).
  • Updated version of mysqltuner script.
  • Refactored Nginx config files to be consistent with upstream/Debian defaults.
  • Moved NodeJS buildcode to common ( (Development - should have no end user impact).
  • Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance.

Links

New TurnKey OpenCart version (17.0)

Changes:

  • Update OpenCart to latest stable release - 3.0.3.8.
  • Updated all relevant Debian packages to Bullseye/11 versions; including PHP 7.4.
  • Provide predefined dh_params (via 'turnkey-make-ssl-cert' where relevant) as per RFC7919 - part of #1653.
  • Updated version of mysqltuner script.
  • Enable HTTP/2 by default (where possible). Note: will not actually work until a CA signed cert is generated or installed.
  • Configure OCSP stapling (will only work once a valid cert is configured).
  • Enable HSTS by default (only effects HTTPS traffic - full implementation also requires HTTP redirect to HTTPS and valid cert).
  • Enable Apache mod-headers by default (required for HSTS).
  • Disable cipher order in default ssl.conf (no longer required with the secure cipher suites we use; mild improvement in cpu resources).
  • Note: Please refer to turnkey-core's 17.0 changelog for changes common to all appliances. Here we only describe changes specific to this appliance.

Links

Pages

more