|
- # This is a sample file demonstrating how to set up reverse-proxy for dimension.DOMAIN.
- # If you're not using Dimension (`matrix_dimension_enabled: false`, which is also the default), you won't need this.
-
- <VirtualHost *:80>
- ServerName dimension.DOMAIN
-
- ProxyVia On
-
- # Map /.well-known/acme-challenge to the certbot server
- # If you manage SSL certificates by yourself, this will differ.
- <Location /.well-known/acme-challenge>
- ProxyPreserveHost On
- ProxyPass http://127.0.0.1:2402/.well-known/acme-challenge
- </Location>
-
- Redirect permanent / https://dimension.DOMAIN/
- </VirtualHost>
-
- <VirtualHost *:443>
- ServerName dimension.DOMAIN
-
- SSLEngine On
-
- # If you manage SSL certificates by yourself, these paths will differ.
- SSLCertificateFile /matrix/ssl/config/live/dimension.DOMAIN/fullchain.pem
- SSLCertificateKeyFile /matrix/ssl/config/live/dimension.DOMAIN/privkey.pem
-
- SSLProxyEngine on
- SSLProxyProtocol +TLSv1.2 +TLSv1.3
- SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
-
- ProxyPreserveHost On
- ProxyRequests Off
- ProxyVia On
-
- ProxyPass / http://127.0.0.1:8184/
- ProxyPassReverse / http://127.0.0.1:8184/
-
- ErrorLog ${APACHE_LOG_DIR}/dimension.DOMAIN-error.log
- CustomLog ${APACHE_LOG_DIR}/dimension.DOMAIN-access.log combined
- </VirtualHost>
|
