overmind
/
matrix-docker-ansible-deploy
kopie van https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Vork 0
Code Kwesties 0 Publicaties 0 Wiki Activiteit
Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2107 Commits
13 Branches
487 MiB
 
 
Tree: 2c09111a3a
Branches Labels
${ item.name }
Maak branch ${ searchTerm }
van '2c09111a3a'
${ noResults }
matrix-docker-ansible-deploy/examples/apache/matrix-synapse.conf

125 regels
4.4 KiB
Ruw Blame Geschiedenis 

  1. # This is a sample file demonstrating how to set up reverse-proxy for matrix.DOMAIN

  2. 

  3. <VirtualHost *:80>

  4. 	ServerName matrix.DOMAIN

  5. 

  6. 	ProxyVia On

  7. 

  8. 	# Map /.well-known/acme-challenge to the certbot server

  9. 	# If you manage SSL certificates by yourself, this will differ.

  10. 	<Location /.well-known/acme-challenge>

  11. 		ProxyPreserveHost On

  12. 		ProxyPass http://127.0.0.1:2402/.well-known/acme-challenge

  13. 	</Location>

  14. 

  15. 	Redirect permanent / https://matrix.DOMAIN/

  16. </VirtualHost>

  17. 

  18. # Client-Server API

  19. <VirtualHost *:443>

  20. 	ServerName matrix.DOMAIN

  21. 

  22. 	SSLEngine On

  23. 

  24. 	# If you manage SSL certificates by yourself, these paths will differ.

  25. 	SSLCertificateFile /matrix/ssl/config/live/matrix.DOMAIN/fullchain.pem

  26. 	SSLCertificateKeyFile /matrix/ssl/config/live/matrix.DOMAIN/privkey.pem

  27. 

  28. 	SSLProxyEngine on

  29. 	SSLProxyProtocol +TLSv1.2 +TLSv1.3

  30. 	SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

  31. 

  32. 	ProxyPreserveHost On

  33. 	ProxyRequests Off

  34. 	ProxyVia On

  35. 

  36. 	# Keep some URIs free for different proxy/location

  37. 	ProxyPassMatch ^/.well-known/matrix/client !

  38. 	ProxyPassMatch ^/.well-known/matrix/server !

  39. 	ProxyPassMatch ^/_matrix/identity !

  40. 	ProxyPassMatch ^/_matrix/client/r0/user_directory/search !

  41. 

  42. 	# Proxy all remaining traffic to Synapse

  43. 	AllowEncodedSlashes NoDecode

  44. 	ProxyPass /_matrix http://127.0.0.1:8008/_matrix retry=0 nocanon

  45. 	ProxyPassReverse /_matrix http://127.0.0.1:8008/_matrix

  46. 	ProxyPass /_synapse/client http://127.0.0.1:8008/_synapse/client retry=0 nocanon

  47. 	ProxyPassReverse /_synapse/client http://127.0.0.1:8008/_synapse/client

  48. 

  49. 	# Map /.well-known/matrix/client for client discovery

  50. 	Alias /.well-known/matrix/client /matrix/static-files/.well-known/matrix/client

  51. 	<Files "/matrix/static-files/.well-known/matrix/client">

  52. 		Require all granted

  53. 	</Files>

  54. 	<Location "/.well-known/matrix/client">

  55. 		Header always set Content-Type "application/json"

  56. 		Header always set Access-Control-Allow-Origin "*"

  57. 	</Location>

  58. 	# Map /.well-known/matrix/server for server discovery

  59. 	Alias /.well-known/matrix/server /matrix/static-files/.well-known/matrix/server

  60. 	<Files "/matrix/static-files/.well-known/matrix/server">

  61. 		Require all granted

  62. 	</Files>

  63. 	<Location "/.well-known/matrix/server">

  64. 		Header always set Content-Type "application/json"

  65. 	</Location>

  66. 	<Directory /matrix/static-files/.well-known/matrix/>

  67. 		AllowOverride All

  68. 		# Apache 2.4:

  69. 		Require all granted

  70. 		# Or for Apache 2.2:

  71. 		#order allow,deny

  72. 	</Directory>

  73. 

  74. 	# Map /_matrix/identity to the identity server

  75. 	<Location /_matrix/identity>

  76. 		ProxyPass http://127.0.0.1:8090/_matrix/identity nocanon

  77. 	</Location>

  78. 

  79. 	# Map /_matrix/client/r0/user_directory/search to the identity server

  80. 	<Location /_matrix/client/r0/user_directory/search>

  81. 		ProxyPass http://127.0.0.1:8090/_matrix/client/r0/user_directory/search nocanon

  82. 	</Location>

  83. 

  84. 	ErrorLog ${APACHE_LOG_DIR}/matrix.DOMAIN-error.log

  85. 	CustomLog ${APACHE_LOG_DIR}/matrix.DOMAIN-access.log combined

  86. </VirtualHost>

  87. 

  88. # Server-Server (federation) API

  89. # Use this apache reverse proxy template to enable matrix server-to-server federation traffic

  90. # Be sure that network traffic on port 8448 is possible

  91. #

  92. # You can check your federation config at https://federationtester.matrix.org/

  93. # Enter there your base DOMAIN address, NOT your matrix.DOMAIN address, ex. https://DOMAIN

  94. #

  95. # In this example we use all services on the same machine (127.0.0.1) but you can do this with different machines.

  96. # If you do so be sure to reach the destinated IPADRESS and the correspondending port. Check this with netstat, nmap or your favourite tool.

  97. Listen 8448

  98. <VirtualHost *:8448>

  99. 	ServerName matrix.DOMAIN

  100. 

  101. 	SSLEngine On

  102. 

  103. 	# If you manage SSL certificates by yourself, these paths will differ.

  104. 	SSLCertificateFile /matrix/ssl/config/live/matrix.DOMAIN/fullchain.pem

  105. 	SSLCertificateKeyFile /matrix/ssl/config/live/matrix.DOMAIN/privkey.pem

  106. 

  107. 	SSLProxyEngine on

  108. 	SSLProxyProtocol +TLSv1.2 +TLSv1.3

  109. 	SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

  110. 

  111. 	ProxyPreserveHost On

  112. 	ProxyRequests Off

  113. 	ProxyVia On

  114. 

  115. 	# Proxy all remaining traffic to the Synapse port

  116. 	# Beware: In this example the local traffic goes to the local synapse server at 127.0.0.1

  117. 	# Of course you can use another IPADRESS in case of using other synapse servers in your network

  118. 	AllowEncodedSlashes NoDecode

  119. 	ProxyPass /_matrix http://127.0.0.1:8048/_matrix retry=0 nocanon

  120. 	ProxyPassReverse /_matrix http://127.0.0.1:8048/_matrix

  121. 

  122. 	ErrorLog ${APACHE_LOG_DIR}/matrix.DOMAIN-error.log

  123. 	CustomLog ${APACHE_LOG_DIR}/matrix.DOMAIN-access.log combined

  124. </VirtualHost>