Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057pull/1061/head
| @@ -77,7 +77,7 @@ server { | |||||
| {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | ||||
| ssl_stapling on; | ssl_stapling on; | ||||
| ssl_stapling_verify on; | ssl_stapling_verify on; | ||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem; | |||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_bot_go_neb_hostname }}/chain.pem; | |||||
| {% endif %} | {% endif %} | ||||
| {{ render_vhost_directives() }} | {{ render_vhost_directives() }} | ||||
| @@ -82,9 +82,9 @@ server { | |||||
| {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | ||||
| ssl_stapling on; | ssl_stapling on; | ||||
| ssl_stapling_verify on; | ssl_stapling_verify on; | ||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_element_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| {{ render_vhost_directives() }} | {{ render_vhost_directives() }} | ||||
| } | } | ||||
| {% endif %} | {% endif %} | ||||
| @@ -80,8 +80,8 @@ server { | |||||
| {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | ||||
| ssl_stapling on; | ssl_stapling on; | ||||
| ssl_stapling_verify on; | ssl_stapling_verify on; | ||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_dimension_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| {{ render_vhost_directives() }} | {{ render_vhost_directives() }} | ||||
| } | } | ||||
| @@ -201,11 +201,11 @@ server { | |||||
| ssl_ciphers {{ matrix_nginx_proxy_ssl_ciphers }}; | ssl_ciphers {{ matrix_nginx_proxy_ssl_ciphers }}; | ||||
| {% endif %} | {% endif %} | ||||
| ssl_prefer_server_ciphers {{ matrix_nginx_proxy_ssl_prefer_server_ciphers }}; | ssl_prefer_server_ciphers {{ matrix_nginx_proxy_ssl_prefer_server_ciphers }}; | ||||
| {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | ||||
| ssl_stapling on; | ssl_stapling on; | ||||
| ssl_stapling_verify on; | ssl_stapling_verify on; | ||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem; | |||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_matrix_hostname }}/chain.pem; | |||||
| {% endif %} | {% endif %} | ||||
| {{ render_vhost_directives() }} | {{ render_vhost_directives() }} | ||||
| @@ -10,7 +10,7 @@ | |||||
| # add_header X-Content-Type-Options nosniff; | # add_header X-Content-Type-Options nosniff; | ||||
| # add_header X-Frame-Options SAMEORIGIN; | # add_header X-Frame-Options SAMEORIGIN; | ||||
| add_header Referrer-Policy "strict-origin-when-cross-origin"; | add_header Referrer-Policy "strict-origin-when-cross-origin"; | ||||
| {% if matrix_nginx_proxy_floc_optout_enabled %} | {% if matrix_nginx_proxy_floc_optout_enabled %} | ||||
| add_header Permissions-Policy interest-cohort=() always; | add_header Permissions-Policy interest-cohort=() always; | ||||
| {% endif %} | {% endif %} | ||||
| @@ -88,8 +88,8 @@ server { | |||||
| {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | ||||
| ssl_stapling on; | ssl_stapling on; | ||||
| ssl_stapling_verify on; | ssl_stapling_verify on; | ||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_grafana_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| {{ render_vhost_directives() }} | {{ render_vhost_directives() }} | ||||
| } | } | ||||
| @@ -122,8 +122,8 @@ server { | |||||
| {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | ||||
| ssl_stapling on; | ssl_stapling on; | ||||
| ssl_stapling_verify on; | ssl_stapling_verify on; | ||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_jitsi_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| {{ render_vhost_directives() }} | {{ render_vhost_directives() }} | ||||
| } | } | ||||
| @@ -65,8 +65,8 @@ server { | |||||
| {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | ||||
| ssl_stapling on; | ssl_stapling on; | ||||
| ssl_stapling_verify on; | ssl_stapling_verify on; | ||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_riot_compat_redirect_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| {{ render_vhost_directives() }} | {{ render_vhost_directives() }} | ||||
| } | } | ||||
| @@ -79,8 +79,8 @@ server { | |||||
| {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | {% if matrix_nginx_proxy_ocsp_stapling_enabled %} | ||||
| ssl_stapling on; | ssl_stapling on; | ||||
| ssl_stapling_verify on; | ssl_stapling_verify on; | ||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_sygnal_hostname }}/chain.pem; | |||||
| {% endif %} | |||||
| {{ render_vhost_directives() }} | {{ render_vhost_directives() }} | ||||
| } | } | ||||