overmind
/
matrix-docker-ansible-deploy
réplica de https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Código Incidencias 0 Lanzamientos 0 Wiki Actividad
Matrix Docker Ansible eploy
No puede seleccionar más de 25 temas Los temas deben comenzar con una letra o número, pueden incluir guiones ('-') y pueden tener hasta 35 caracteres de largo.
1706 Commits
13 Ramas
487 MiB
 
 
Árbol: 073c96a3fd
Ramas Etiquetas
${ item.name }
Crear rama ${ searchTerm }
desde '073c96a3fd'
${ noResults }
matrix-docker-ansible-deploy/examples/apache/matrix-synapse.conf

123 líneas
4.3 KiB
Original Blame Histórico 

  1. # This is a sample file demonstrating how to set up reverse-proxy for matrix.DOMAIN

  2. 

  3. <VirtualHost *:80>

  4. 	ServerName matrix.DOMAIN

  5. 

  6. 	ProxyVia On

  7. 

  8. 	# Map /.well-known/acme-challenge to the certbot server

  9. 	# If you manage SSL certificates by yourself, this will differ.

  10. 	<Location /.well-known/acme-challenge>

  11. 		ProxyPreserveHost On

  12. 		ProxyPass http://127.0.0.1:2402/.well-known/acme-challenge

  13. 	</Location>

  14. 

  15. 	Redirect permanent / https://matrix.DOMAIN/

  16. </VirtualHost>

  17. 

  18. # Client-Server API

  19. <VirtualHost *:443>

  20. 	ServerName matrix.DOMAIN

  21. 

  22. 	SSLEngine On

  23. 

  24. 	# If you manage SSL certificates by yourself, these paths will differ.

  25. 	SSLCertificateFile /matrix/ssl/config/live/matrix.DOMAIN/fullchain.pem

  26. 	SSLCertificateKeyFile /matrix/ssl/config/live/matrix.DOMAIN/privkey.pem

  27. 

  28. 	SSLProxyEngine on

  29. 	SSLProxyProtocol +TLSv1.2 +TLSv1.3

  30. 	SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

  31. 

  32. 	ProxyPreserveHost On

  33. 	ProxyRequests Off

  34. 	ProxyVia On

  35. 

  36. 	# Keep some URIs free for different proxy/location

  37. 	ProxyPassMatch ^/.well-known/matrix/client !

  38. 	ProxyPassMatch ^/.well-known/matrix/server !

  39. 	ProxyPassMatch ^/_matrix/identity !

  40. 	ProxyPassMatch ^/_matrix/client/r0/user_directory/search !

  41. 

  42. 	# Proxy all remaining traffic to Synapse

  43. 	AllowEncodedSlashes NoDecode

  44. 	ProxyPass /_matrix http://127.0.0.1:8008/_matrix retry=0 nocanon

  45. 	ProxyPassReverse /_matrix http://127.0.0.1:8008/_matrix

  46. 

  47. 	# Map /.well-known/matrix/client for client discovery

  48. 	Alias /.well-known/matrix/client /matrix/static-files/.well-known/matrix/client

  49. 	<Files "/matrix/static-files/.well-known/matrix/client">

  50. 		Require all granted

  51. 	</Files>

  52. 	<Location "/.well-known/matrix/client">

  53. 		Header always set Content-Type "application/json"

  54. 		Header always set Access-Control-Allow-Origin "*"

  55. 	</Location>

  56. 	# Map /.well-known/matrix/server for server discovery

  57. 	Alias /.well-known/matrix/server /matrix/static-files/.well-known/matrix/server

  58. 	<Files "/matrix/static-files/.well-known/matrix/server">

  59. 		Require all granted

  60. 	</Files>

  61. 	<Location "/.well-known/matrix/server">

  62. 		Header always set Content-Type "application/json"

  63. 	</Location>

  64. 	<Directory /matrix/static-files/.well-known/matrix/>

  65. 		AllowOverride All

  66. 		# Apache 2.4:

  67. 		Require all granted

  68. 		# Or for Apache 2.2:

  69. 		#order allow,deny

  70. 	</Directory>

  71. 

  72. 	# Map /_matrix/identity to the identity server

  73. 	<Location /_matrix/identity>

  74. 		ProxyPass http://127.0.0.1:8090/_matrix/identity nocanon

  75. 	</Location>

  76. 

  77. 	# Map /_matrix/client/r0/user_directory/search to the identity server

  78. 	<Location /_matrix/client/r0/user_directory/search>

  79. 		ProxyPass http://127.0.0.1:8090/_matrix/client/r0/user_directory/search nocanon

  80. 	</Location>

  81. 

  82. 	ErrorLog ${APACHE_LOG_DIR}/matrix.DOMAIN-error.log

  83. 	CustomLog ${APACHE_LOG_DIR}/matrix.DOMAIN-access.log combined

  84. </VirtualHost>

  85. 

  86. # Server-Server (federation) API

  87. # Use this apache reverse proxy template to enable matrix server-to-server federation traffic

  88. # Be sure that network traffic on port 8448 is possible

  89. #

  90. # You can check your federation config at https://federationtester.matrix.org/

  91. # Enter there your base DOMAIN address, NOT your matrix.DOMAIN address, ex. https://DOMAIN

  92. #

  93. # In this example we use all services on the same machine (127.0.0.1) but you can do this with different machines.

  94. # If you do so be sure to reach the destinated IPADRESS and the correspondending port. Check this with netstat, nmap or your favourite tool.

  95. Listen 8448

  96. <VirtualHost *:8448>

  97. 	ServerName matrix.DOMAIN

  98. 

  99. 	SSLEngine On

  100. 

  101. 	# If you manage SSL certificates by yourself, these paths will differ.

  102. 	SSLCertificateFile /matrix/ssl/config/live/matrix.DOMAIN/fullchain.pem

  103. 	SSLCertificateKeyFile /matrix/ssl/config/live/matrix.DOMAIN/privkey.pem

  104. 

  105. 	SSLProxyEngine on

  106. 	SSLProxyProtocol +TLSv1.2 +TLSv1.3

  107. 	SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

  108. 

  109. 	ProxyPreserveHost On

  110. 	ProxyRequests Off

  111. 	ProxyVia On

  112. 

  113. 	# Proxy all remaining traffic to the Synapse port

  114. 	# Beware: In this example the local traffic goes to the local synapse server at 127.0.0.1

  115. 	# Of course you can use another IPADRESS in case of using other synapse servers in your network

  116. 	AllowEncodedSlashes NoDecode

  117. 	ProxyPass /_matrix http://127.0.0.1:8048/_matrix retry=0 nocanon

  118. 	ProxyPassReverse /_matrix http://127.0.0.1:8048/_matrix

  119. 

  120. 	ErrorLog ${APACHE_LOG_DIR}/matrix.DOMAIN-error.log

  121. 	CustomLog ${APACHE_LOG_DIR}/matrix.DOMAIN-access.log combined

  122. </VirtualHost>