overmind
/
matrix-docker-ansible-deploy
miroir de https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Bifurcation 0
Code Tickets 0 Versions 0 Wiki Activité
Matrix Docker Ansible eploy
Vous ne pouvez pas sélectionner plus de 25 sujets Les noms de sujets doivent commencer par une lettre ou un nombre, peuvent contenir des tirets ('-') et peuvent comporter jusqu'à 35 caractères.
2456 Révisions
12 Branches
1.3 GiB
 
 
Aborescence: 2b96fb0cf1
Branches Tags
${ item.name }
Créer la branche ${ searchTerm }
de '2b96fb0cf1'
${ noResults }
matrix-docker-ansible-deploy/roles/matrix-nginx-proxy/templates/nginx/conf.d/matrix-domain.conf.j2

247 lignes
8.4 KiB
Brut Annotations Historique 

  1. #jinja2: lstrip_blocks: "True"

  2. {% macro render_nginx_status_location_block(addresses) %}

  3. 	{# Empty first line to make indentation prettier. #}

  4. 

  5. 	location /nginx_status {

  6. 		stub_status on;

  7. 		access_log off;

  8. 		{% for address in addresses %}

  9. 		allow {{ address }};

  10. 		{% endfor %}

  11. 		deny all;

  12. 	}

  13. {% endmacro %}

  14. 

  15. 

  16. {% macro render_vhost_directives() %}

  17. 	gzip on;

  18. 	gzip_types text/plain application/json;

  19. 

  20. 	location /.well-known/matrix {

  21. 		root {{ matrix_static_files_base_path }};

  22. 		{#

  23. 			A somewhat long expires value is used to prevent outages

  24. 			in case this is unreachable due to network failure or

  25. 			due to the base domain's server completely dying.

  26. 		#}

  27. 		expires 4h;

  28. 		default_type application/json;

  29. 		add_header Access-Control-Allow-Origin *;

  30. 	}

  31. 

  32. 	{% if matrix_nginx_proxy_proxy_matrix_nginx_status_enabled %}

  33. 		{{ render_nginx_status_location_block(matrix_nginx_proxy_proxy_matrix_nginx_status_allowed_addresses) }}

  34. 	{% endif %}

  35. 

  36. 	{% if matrix_nginx_proxy_proxy_matrix_corporal_api_enabled %}

  37. 	location ^~ /_matrix/corporal {

  38. 		{% if matrix_nginx_proxy_enabled %}

  39. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  40. 			resolver 127.0.0.11 valid=5s;

  41. 			set $backend "{{ matrix_nginx_proxy_proxy_matrix_corporal_api_addr_with_container }}";

  42. 			proxy_pass http://$backend;

  43. 		{% else %}

  44. 			{# Generic configuration for use outside of our container setup #}

  45. 			proxy_pass http://{{ matrix_nginx_proxy_proxy_matrix_corporal_api_addr_sans_container }};

  46. 		{% endif %}

  47. 

  48. 		proxy_set_header Host $host;

  49. 		proxy_set_header X-Forwarded-For $remote_addr;

  50. 	}

  51. 	{% endif %}

  52. 

  53. 	{% if matrix_nginx_proxy_proxy_matrix_identity_api_enabled %}

  54. 	location ^~ /_matrix/identity {

  55. 		{% if matrix_nginx_proxy_enabled %}

  56. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  57. 			resolver 127.0.0.11 valid=5s;

  58. 			set $backend "{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_with_container }}";

  59. 			proxy_pass http://$backend;

  60. 		{% else %}

  61. 			{# Generic configuration for use outside of our container setup #}

  62. 			proxy_pass http://{{ matrix_nginx_proxy_proxy_matrix_identity_api_addr_sans_container }};

  63. 		{% endif %}

  64. 

  65. 		proxy_set_header Host $host;

  66. 		proxy_set_header X-Forwarded-For $remote_addr;

  67. 	}

  68. 	{% endif %}

  69. 

  70. 	{% if matrix_nginx_proxy_proxy_matrix_user_directory_search_enabled %}

  71. 	location ^~ /_matrix/client/r0/user_directory/search {

  72. 		{% if matrix_nginx_proxy_enabled %}

  73. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  74. 			resolver 127.0.0.11 valid=5s;

  75. 			set $backend "{{ matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_with_container }}";

  76. 			proxy_pass http://$backend;

  77. 		{% else %}

  78. 			{# Generic configuration for use outside of our container setup #}

  79. 			proxy_pass http://{{ matrix_nginx_proxy_proxy_matrix_user_directory_search_addr_sans_container }};

  80. 		{% endif %}

  81. 

  82. 		proxy_set_header Host $host;

  83. 		proxy_set_header X-Forwarded-For $remote_addr;

  84. 	}

  85. 	{% endif %}

  86. 

  87. 	{% if matrix_nginx_proxy_proxy_matrix_3pid_registration_enabled %}

  88. 	location ~ ^/_matrix/client/r0/register/(email|msisdn)/requestToken$ {

  89. 		{% if matrix_nginx_proxy_enabled %}

  90. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  91. 			resolver 127.0.0.11 valid=5s;

  92. 			set $backend "{{ matrix_nginx_proxy_proxy_matrix_3pid_registration_addr_with_container }}";

  93. 			proxy_pass http://$backend;

  94. 		{% else %}

  95. 			{# Generic configuration for use outside of our container setup #}

  96. 			proxy_pass http://{{ matrix_nginx_proxy_proxy_matrix_3pid_registration_addr_sans_container }};

  97. 		{% endif %}

  98. 

  99. 		proxy_set_header Host $host;

  100. 		proxy_set_header X-Forwarded-For $remote_addr;

  101. 	}

  102. 	{% endif %}

  103. 

  104. 	{% for configuration_block in matrix_nginx_proxy_proxy_matrix_additional_server_configuration_blocks %}

  105. 		{{- configuration_block }}

  106. 	{% endfor %}

  107. 

  108. 	{#

  109. 		This handles the Matrix Client API only.

  110. 		The Matrix Federation API is handled by a separate vhost.

  111. 	#}

  112. 	location ~* ^({{ matrix_nginx_proxy_proxy_matrix_client_api_forwarded_location_prefix_regexes|join('|') }}) {

  113. 		{% if matrix_nginx_proxy_enabled %}

  114. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  115. 			resolver 127.0.0.11 valid=5s;

  116. 			set $backend "{{ matrix_nginx_proxy_proxy_matrix_client_api_addr_with_container }}";

  117. 			proxy_pass http://$backend;

  118. 		{% else %}

  119. 			{# Generic configuration for use outside of our container setup #}

  120. 			proxy_pass http://{{ matrix_nginx_proxy_proxy_matrix_client_api_addr_sans_container }};

  121. 		{% endif %}

  122. 

  123. 		proxy_set_header Host $host;

  124. 		proxy_set_header X-Forwarded-For $remote_addr;

  125. 

  126. 		client_body_buffer_size 25M;

  127. 		client_max_body_size {{ matrix_nginx_proxy_proxy_matrix_client_api_client_max_body_size_mb }}M;

  128. 		proxy_max_temp_file_size 0;

  129. 	}

  130. 

  131. 	location / {

  132. 		{% if matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain %}

  133. 			return 302 $scheme://{{ matrix_nginx_proxy_proxy_matrix_client_redirect_root_uri_to_domain }}$request_uri;

  134. 		{% else %}

  135. 			rewrite ^/$ /_matrix/static/ last;

  136. 		{% endif %}

  137. 	}

  138. {% endmacro %}

  139. 

  140. server {

  141. 	listen {{ 8080 if matrix_nginx_proxy_enabled else 80 }};

  142. 	server_name {{ matrix_nginx_proxy_proxy_matrix_hostname }};

  143. 

  144. 	server_tokens off;

  145. 	root /dev/null;

  146. 

  147. 	{% if matrix_nginx_proxy_https_enabled %}

  148. 		location /.well-known/acme-challenge {

  149. 			{% if matrix_nginx_proxy_enabled %}

  150. 				{# Use the embedded DNS resolver in Docker containers to discover the service #}

  151. 				resolver 127.0.0.11 valid=5s;

  152. 				set $backend "matrix-certbot:8080";

  153. 				proxy_pass http://$backend;

  154. 			{% else %}

  155. 				{# Generic configuration for use outside of our container setup #}

  156. 				proxy_pass http://127.0.0.1:{{ matrix_ssl_lets_encrypt_certbot_standalone_http_port }};

  157. 			{% endif %}

  158. 		}

  159. 

  160. 		{% if matrix_nginx_proxy_proxy_matrix_nginx_status_enabled %}

  161. 			{{ render_nginx_status_location_block(matrix_nginx_proxy_proxy_matrix_nginx_status_allowed_addresses) }}

  162. 		{% endif %}

  163. 

  164. 		location / {

  165. 			return 301 https://$http_host$request_uri;

  166. 		}

  167. 	{% else %}

  168. 		{{ render_vhost_directives() }}

  169. 	{% endif %}

  170. }

  171. 

  172. {% if matrix_nginx_proxy_https_enabled %}

  173. server {

  174. 	listen {{ 8443 if matrix_nginx_proxy_enabled else 443 }} ssl http2;

  175. 	listen [::]:{{ 8443 if matrix_nginx_proxy_enabled else 443 }} ssl http2;

  176. 

  177. 	server_name {{ matrix_nginx_proxy_proxy_matrix_hostname }};

  178. 

  179. 	server_tokens off;

  180. 	root /dev/null;

  181. 

  182. 	ssl_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_matrix_hostname }}/fullchain.pem;

  183. 	ssl_certificate_key {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_matrix_hostname }}/privkey.pem;

  184. 

  185. 	ssl_protocols {{ matrix_nginx_proxy_ssl_protocols }};

  186. 	{% if matrix_nginx_proxy_ssl_ciphers != '' %}

  187. 	ssl_ciphers {{ matrix_nginx_proxy_ssl_ciphers }};

  188. 	{% endif %}

  189. 	ssl_prefer_server_ciphers {{ matrix_nginx_proxy_ssl_prefer_server_ciphers }};

  190. 

  191. 	{{ render_vhost_directives() }}

  192. }

  193. {% endif %}

  194. 

  195. {% if matrix_nginx_proxy_proxy_matrix_federation_api_enabled %}

  196. {#

  197. 	This federation vhost is a little special.

  198. 	It serves federation over HTTP or HTTPS, depending on `matrix_nginx_proxy_https_enabled`.

  199. #}

  200. server {

  201. 	{% if matrix_nginx_proxy_https_enabled %}

  202. 		listen 8448 ssl http2;

  203. 		listen [::]:8448 ssl http2;

  204. 	{% else %}

  205. 		listen 8448;

  206. 	{% endif %}

  207. 

  208. 	server_name {{ matrix_nginx_proxy_proxy_matrix_hostname }};

  209. 	server_tokens off;

  210. 

  211. 	root /dev/null;

  212. 

  213. 	gzip on;

  214. 	gzip_types text/plain application/json;

  215. 

  216. 	{% if matrix_nginx_proxy_https_enabled %}

  217. 		ssl_certificate {{ matrix_nginx_proxy_proxy_matrix_federation_api_ssl_certificate }};

  218. 		ssl_certificate_key {{ matrix_nginx_proxy_proxy_matrix_federation_api_ssl_certificate_key }};

  219. 

  220. 		ssl_protocols {{ matrix_nginx_proxy_ssl_protocols }};

  221. 		{% if matrix_nginx_proxy_ssl_ciphers != '' %}

  222. 			ssl_ciphers {{ matrix_nginx_proxy_ssl_ciphers }};

  223. 		{% endif %}

  224. 		ssl_prefer_server_ciphers {{ matrix_nginx_proxy_ssl_prefer_server_ciphers }};

  225. 	{% endif %}

  226. 

  227. 	location / {

  228. 		{% if matrix_nginx_proxy_enabled %}

  229. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  230. 			resolver 127.0.0.11 valid=5s;

  231. 			set $backend "{{ matrix_nginx_proxy_proxy_matrix_federation_api_addr_with_container }}";

  232. 			proxy_pass http://$backend;

  233. 		{% else %}

  234. 			{# Generic configuration for use outside of our container setup #}

  235. 			proxy_pass http://{{ matrix_nginx_proxy_proxy_matrix_federation_api_addr_sans_container }};

  236. 		{% endif %}

  237. 

  238. 		proxy_set_header Host $host;

  239. 		proxy_set_header X-Forwarded-For $remote_addr;

  240. 

  241. 		client_body_buffer_size 25M;

  242. 		client_max_body_size {{ matrix_nginx_proxy_proxy_matrix_federation_api_client_max_body_size_mb }}M;

  243. 		proxy_max_temp_file_size 0;

  244. 	}

  245. }

  246. {% endif %}