fix up nginx

2026-01-26 06:46:38 +03:00 · 2024-11-04 18:58:43 +00:00
parent a3b41ec3ed
commit 1ad060cc0f
12 changed files with 139 additions and 139 deletions
--- a/data-template/nginx/conf.d/app.conf
+++ b/data-template/nginx/conf.d/app.conf
@@ -0,0 +1,90 @@
+${CONFIG_HEADER}
+
+# taken from https://element-hq.github.io/synapse/latest/reverse_proxy.html
+# mixed with https://github.com/wmnnd/nginx-certbot/tree/master/etc/nginx/conf.d/nginx
+
+server {
+    server_name ${DOMAIN};
+    server_tokens off;
+
+    listen 80;
+
+    # location /.well-known/acme-challenge/ {
+    #    root /var/www/certbot;
+    # }
+
+    location / {
+        return 301 https://${DOLLAR}host${DOLLAR}request_uri;
+    }
+}
+
+server {
+    server_name ${ELEMENT_WEB_FQDN};
+    server_tokens off;
+
+    include /etc/nginx/conf.d/include/ssl.conf;
+
+    location / {
+        proxy_pass http://element-web:8080;
+    }
+}
+
+server {
+    server_name ${ELEMENT_CALL_FQDN};
+    server_tokens off;
+
+    include /etc/nginx/conf.d/include/ssl.conf;
+
+    location / {
+        proxy_pass http://element-call:8082;
+    }
+}
+
+server {
+    server_name ${MAS_FQDN};
+    server_tokens off;
+
+    include /etc/nginx/conf.d/include/ssl.conf;
+
+    location / {
+        proxy_pass http://auth:8083;
+    }
+}
+
+server {
+    server_name ${HOMESERVER_FQDN};
+    server_tokens off;
+
+    include /etc/nginx/conf.d/include/ssl.conf;
+
+    # For the federation port
+    listen 8448 ssl default_server;
+    listen [::]:8448 ssl default_server;
+
+    # pass auth to MAS
+    location ~ ^/_matrix/client/(.*)/(login|logout|refresh)             { proxy_pass http://auth:8083; }
+
+    # use the generic worker as a synchrotron:
+    # taken from https://element-hq.github.io/synapse/latest/workers.html#synapseappgeneric_worker
+    location ~ ^/_matrix/client/(r0|v3)/sync${DOLLAR}                           { proxy_pass http://synapse-generic-worker-1:8081; }
+    location ~ ^/_matrix/client/(api/v1|r0|v3)/events${DOLLAR}                  { proxy_pass http://synapse-generic-worker-1:8081; }
+    location ~ ^/_matrix/client/(api/v1|r0|v3)/initialSync${DOLLAR}             { proxy_pass http://synapse-generic-worker-1:8081; }
+    location ~ ^/_matrix/client/(api/v1|r0|v3)/rooms/[^/]+/initialSync${DOLLAR} { proxy_pass http://synapse-generic-worker-1:8081; }
+
+    location / {
+        proxy_pass http://synapse:8008;
+        proxy_set_header X-Forwarded-For ${DOLLAR}remote_addr;
+        proxy_set_header X-Forwarded-Proto ${DOLLAR}scheme;
+        proxy_set_header Host ${DOLLAR}host;
+
+        # Nginx by default only allows file uploads up to 1M in size
+        # Increase client_max_body_size to match max_upload_size defined in homeserver.yaml
+        client_max_body_size 50M;
+    }
+
+    location /.well-known {}
+
+    # Synapse responses may be chunked, which is an HTTP/1.1 feature.
+    proxy_http_version 1.1;
+}
+