overmind
/
matrix-docker-ansible-deploy
miroir de https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Bifurcation 0
Code Tickets 0 Versions 0 Wiki Activité
Matrix Docker Ansible eploy
Vous ne pouvez pas sélectionner plus de 25 sujets Les noms de sujets doivent commencer par une lettre ou un nombre, peuvent contenir des tirets ('-') et peuvent comporter jusqu'à 35 caractères.
238 Révisions
12 Branches
228 MiB
 
 
Aborescence: 5533db8a28
Branches Tags
${ item.name }
Créer la branche ${ searchTerm }
de '5533db8a28'
${ noResults }
matrix-docker-ansible-deploy/roles/matrix-server/templates/nginx-conf.d/matrix-synapse.conf.j2

108 lignes
3.2 KiB
Brut Annotations Historique 

  1. server {

  2. 	listen 80;

  3. 	server_name {{ hostname_matrix }};

  4. 

  5. 	server_tokens off;

  6. 

  7. 	location /.well-known/acme-challenge {

  8. 		{% if matrix_nginx_proxy_enabled %}

  9. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  10. 			resolver 127.0.0.11 valid=5s;

  11. 			set $backend "matrix-certbot:80";

  12. 			proxy_pass http://$backend;

  13. 		{% else %}

  14. 			{# Generic configuration for use outside of our container setup #}

  15. 			proxy_pass http://localhost:{{ matrix_ssl_certbot_standalone_http_port }};

  16. 		{% endif %}

  17. 	}

  18. 

  19. 	location / {

  20. 		return 301 https://$http_host$request_uri;

  21. 	}

  22. }

  23. 

  24. server {

  25. 	listen 443 ssl http2;

  26. 	listen [::]:443 ssl http2;

  27. 

  28. 	server_name {{ hostname_matrix }};

  29. 

  30. 	server_tokens off;

  31. 	root /dev/null;

  32. 

  33. 	gzip on;

  34. 	gzip_types text/plain application/json;

  35. 

  36. 	ssl_certificate {{ matrix_ssl_config_dir_path }}/live/{{ hostname_matrix }}/fullchain.pem;

  37. 	ssl_certificate_key {{ matrix_ssl_config_dir_path }}/live/{{ hostname_matrix }}/privkey.pem;

  38. 	ssl_protocols {{ matrix_nginx_proxy_ssl_protocols }};

  39. 	ssl_prefer_server_ciphers on;

  40. 	ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";

  41. 

  42. 	location /.well-known/matrix/client {

  43. 		root {{ matrix_static_files_base_path }};

  44. 		expires 1m;

  45. 		default_type application/json;

  46. 	}

  47. 

  48. 	{% if matrix_corporal_enabled and matrix_corporal_http_api_enabled %}

  49. 	location /_matrix/corporal {

  50. 		{% if matrix_nginx_proxy_enabled %}

  51. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  52. 			resolver 127.0.0.11 valid=5s;

  53. 			set $backend "matrix-corporal:41081";

  54. 			proxy_pass http://$backend;

  55. 		{% else %}

  56. 			{# Generic configuration for use outside of our container setup #}

  57. 			proxy_pass http://localhost:41081;

  58. 		{% endif %}

  59. 	}

  60. 	{% endif %}

  61. 

  62. 	{% if matrix_mxisd_enabled %}

  63. 	location /_matrix/identity {

  64. 		{% if matrix_nginx_proxy_enabled %}

  65. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  66. 			resolver 127.0.0.11 valid=5s;

  67. 			set $backend "matrix-mxisd:8090";

  68. 			proxy_pass http://$backend;

  69. 		{% else %}

  70. 			{# Generic configuration for use outside of our container setup #}

  71. 			proxy_pass http://localhost:8090;

  72. 		{% endif %}

  73. 	}

  74. 	{% endif %}

  75. 

  76. 	{% if matrix_mautrix_telegram_enabled %}

  77. 	location {{ matrix_mautrix_telegram_public_endpoint }} {

  78. 		{% if matrix_nginx_proxy_enabled %}

  79. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  80. 			resolver 127.0.0.11 valid=5s;

  81. 			set $backend "matrix-mautrix-telegram:8080";

  82. 			proxy_pass http://$backend;

  83. 		{% else %}

  84. 			{# Generic configuration for use outside of our container setup #}

  85. 			proxy_pass http://localhost:8080;

  86. 		{% endif %}

  87. 	}

  88. 	{% endif %}

  89. 

  90. 	location /_matrix {

  91. 		{% if matrix_nginx_proxy_enabled %}

  92. 			{# Use the embedded DNS resolver in Docker containers to discover the service #}

  93. 			resolver 127.0.0.11 valid=5s;

  94. 			set $backend "{{ matrix_nginx_proxy_matrix_client_api_addr_with_proxy_container }}";

  95. 			proxy_pass http://$backend;

  96. 		{% else %}

  97. 			{# Generic configuration for use outside of our container setup #}

  98. 			proxy_pass http://{{ matrix_nginx_proxy_matrix_client_api_addr_sans_proxy_container }};

  99. 		{% endif %}

  100. 

  101. 		proxy_set_header X-Forwarded-For $remote_addr;

  102. 

  103. 		client_body_buffer_size 25M;

  104. 		client_max_body_size {{ matrix_synapse_max_upload_size_mb }}M;

  105. 		proxy_max_temp_file_size 0;

  106. 	}

  107. }