|
|
|
@@ -0,0 +1,41 @@ |
|
|
|
# This is a sample file demonstrating how to set up reverse-proxy for dimension.DOMAIN. |
|
|
|
# If you're not using Dimension (`matrix_dimension_enabled: false`, which is also the default), you won't need this. |
|
|
|
|
|
|
|
<VirtualHost *:80> |
|
|
|
ServerName dimension.DOMAIN |
|
|
|
|
|
|
|
ProxyVia On |
|
|
|
|
|
|
|
# Map /.well-known/acme-challenge to the certbot server |
|
|
|
# If you manage SSL certificates by yourself, this will differ. |
|
|
|
<Location /.well-known/acme-challenge> |
|
|
|
ProxyPreserveHost On |
|
|
|
ProxyPass http://127.0.0.1:2402/.well-known/acme-challenge |
|
|
|
</Location> |
|
|
|
|
|
|
|
Redirect permanent / https://dimension.DOMAIN/ |
|
|
|
</VirtualHost> |
|
|
|
|
|
|
|
<VirtualHost *:443> |
|
|
|
ServerName dimension.DOMAIN |
|
|
|
|
|
|
|
SSLEngine On |
|
|
|
|
|
|
|
# If you manage SSL certificates by yourself, these paths will differ. |
|
|
|
SSLCertificateFile /matrix/ssl/config/live/dimension.DOMAIN/fullchain.pem |
|
|
|
SSLCertificateKeyFile /matrix/ssl/config/live/dimension.DOMAIN/privkey.pem |
|
|
|
|
|
|
|
SSLProxyEngine on |
|
|
|
SSLProxyProtocol +TLSv1.1 +TLSv1.2 +TLSv1.3 |
|
|
|
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH |
|
|
|
|
|
|
|
ProxyPreserveHost On |
|
|
|
ProxyRequests Off |
|
|
|
ProxyVia On |
|
|
|
|
|
|
|
ProxyPass / http://127.0.0.1:8184/ |
|
|
|
ProxyPassReverse / http://127.0.0.1:8184/ |
|
|
|
|
|
|
|
ErrorLog ${APACHE_LOG_DIR}/dimension.DOMAIN-error.log |
|
|
|
CustomLog ${APACHE_LOG_DIR}/dimension.DOMAIN-access.log combined |
|
|
|
</VirtualHost> |