overmind
/
matrix-docker-ansible-deploy
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
Fork 0
Code Issues 0 Releases 0 Wiki Activity
Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2962 Commits
13 Branches
487 MiB
 
 
Tree: 635b0cf670
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '635b0cf670'
${ noResults }
matrix-docker-ansible-deploy/examples/apache/matrix-synapse.conf

127 lines
4.5 KiB
Raw Blame History 

  1. # This is a sample file demonstrating how to set up reverse-proxy for matrix.DOMAIN

  2. 

  3. <VirtualHost *:80>

  4. 	ServerName matrix.DOMAIN

  5. 

  6. 	ProxyVia On

  7. 

  8. 	# Map /.well-known/acme-challenge to the certbot server

  9. 	# If you manage SSL certificates by yourself, this will differ.

  10. 	<Location /.well-known/acme-challenge>

  11. 		ProxyPreserveHost On

  12. 		ProxyPass http://127.0.0.1:2402/.well-known/acme-challenge

  13. 	</Location>

  14. 

  15. 	Redirect permanent / https://matrix.DOMAIN/

  16. </VirtualHost>

  17. 

  18. # Client-Server API

  19. <VirtualHost *:443>

  20. 	ServerName matrix.DOMAIN

  21. 

  22. 	SSLEngine On

  23. 

  24. 	# If you manage SSL certificates by yourself, these paths will differ.

  25. 	SSLCertificateFile /matrix/ssl/config/live/matrix.DOMAIN/fullchain.pem

  26. 	SSLCertificateKeyFile /matrix/ssl/config/live/matrix.DOMAIN/privkey.pem

  27. 

  28. 	SSLProxyEngine on

  29. 	SSLProxyProtocol +TLSv1.2 +TLSv1.3

  30. 	SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

  31. 

  32. 	ProxyPreserveHost On

  33. 	ProxyRequests Off

  34. 	ProxyVia On

  35. 	RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}

  36. 

  37. 	# Keep some URIs free for different proxy/location

  38. 	ProxyPassMatch ^/.well-known/matrix/client !

  39. 	ProxyPassMatch ^/.well-known/matrix/server !

  40. 	ProxyPassMatch ^/_matrix/identity !

  41. 	ProxyPassMatch ^/_matrix/client/r0/user_directory/search !

  42. 

  43. 	# Proxy all remaining traffic to Synapse

  44. 	AllowEncodedSlashes NoDecode

  45. 	ProxyPass /_matrix http://127.0.0.1:8008/_matrix retry=0 nocanon

  46. 	ProxyPassReverse /_matrix http://127.0.0.1:8008/_matrix

  47. 	ProxyPass /_synapse/client http://127.0.0.1:8008/_synapse/client retry=0 nocanon

  48. 	ProxyPassReverse /_synapse/client http://127.0.0.1:8008/_synapse/client

  49. 

  50. 	# Map /.well-known/matrix/client for client discovery

  51. 	Alias /.well-known/matrix/client /matrix/static-files/.well-known/matrix/client

  52. 	<Files "/matrix/static-files/.well-known/matrix/client">

  53. 		Require all granted

  54. 	</Files>

  55. 	<Location "/.well-known/matrix/client">

  56. 		Header always set Content-Type "application/json"

  57. 		Header always set Access-Control-Allow-Origin "*"

  58. 	</Location>

  59. 	# Map /.well-known/matrix/server for server discovery

  60. 	Alias /.well-known/matrix/server /matrix/static-files/.well-known/matrix/server

  61. 	<Files "/matrix/static-files/.well-known/matrix/server">

  62. 		Require all granted

  63. 	</Files>

  64. 	<Location "/.well-known/matrix/server">

  65. 		Header always set Content-Type "application/json"

  66. 	</Location>

  67. 	<Directory /matrix/static-files/.well-known/matrix/>

  68. 		AllowOverride All

  69. 		# Apache 2.4:

  70. 		Require all granted

  71. 		# Or for Apache 2.2:

  72. 		#order allow,deny

  73. 	</Directory>

  74. 

  75. 	# Map /_matrix/identity to the identity server

  76. 	<Location /_matrix/identity>

  77. 		ProxyPass http://127.0.0.1:8090/_matrix/identity nocanon

  78. 	</Location>

  79. 

  80. 	# Map /_matrix/client/r0/user_directory/search to the identity server

  81. 	<Location /_matrix/client/r0/user_directory/search>

  82. 		ProxyPass http://127.0.0.1:8090/_matrix/client/r0/user_directory/search nocanon

  83. 	</Location>

  84. 

  85. 	ErrorLog ${APACHE_LOG_DIR}/matrix.DOMAIN-error.log

  86. 	CustomLog ${APACHE_LOG_DIR}/matrix.DOMAIN-access.log combined

  87. </VirtualHost>

  88. 

  89. # Server-Server (federation) API

  90. # Use this apache reverse proxy template to enable matrix server-to-server federation traffic

  91. # Be sure that network traffic on port 8448 is possible

  92. #

  93. # You can check your federation config at https://federationtester.matrix.org/

  94. # Enter there your base DOMAIN address, NOT your matrix.DOMAIN address, ex. https://DOMAIN

  95. #

  96. # In this example we use all services on the same machine (127.0.0.1) but you can do this with different machines.

  97. # If you do so be sure to reach the destinated IPADRESS and the correspondending port. Check this with netstat, nmap or your favourite tool.

  98. Listen 8448

  99. <VirtualHost *:8448>

  100. 	ServerName matrix.DOMAIN

  101. 

  102. 	SSLEngine On

  103. 

  104. 	# If you manage SSL certificates by yourself, these paths will differ.

  105. 	SSLCertificateFile /matrix/ssl/config/live/matrix.DOMAIN/fullchain.pem

  106. 	SSLCertificateKeyFile /matrix/ssl/config/live/matrix.DOMAIN/privkey.pem

  107. 

  108. 	SSLProxyEngine on

  109. 	SSLProxyProtocol +TLSv1.2 +TLSv1.3

  110. 	SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

  111. 

  112. 	ProxyPreserveHost On

  113. 	ProxyRequests Off

  114. 	ProxyVia On

  115. 	RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}

  116. 

  117. 	# Proxy all remaining traffic to the Synapse port

  118. 	# Beware: In this example the local traffic goes to the local synapse server at 127.0.0.1

  119. 	# Of course you can use another IPADRESS in case of using other synapse servers in your network

  120. 	AllowEncodedSlashes NoDecode

  121. 	ProxyPass /_matrix http://127.0.0.1:8048/_matrix retry=0 nocanon

  122. 	ProxyPassReverse /_matrix http://127.0.0.1:8048/_matrix

  123. 

  124. 	ErrorLog ${APACHE_LOG_DIR}/matrix.DOMAIN-error.log

  125. 	CustomLog ${APACHE_LOG_DIR}/matrix.DOMAIN-access.log combined

  126. </VirtualHost>