mirror of
https://github.com/element-hq/element-docker-demo.git
synced 2026-01-25 14:31:09 +03:00
91 lines
2.6 KiB
Plaintext
91 lines
2.6 KiB
Plaintext
${CONFIG_HEADER}
|
|
|
|
# taken from https://element-hq.github.io/synapse/latest/reverse_proxy.html
|
|
# mixed with https://github.com/wmnnd/nginx-certbot/tree/master/etc/nginx/conf.d/nginx
|
|
|
|
server {
|
|
server_name ${DOMAIN};
|
|
server_tokens off;
|
|
|
|
listen 80;
|
|
|
|
# location /.well-known/acme-challenge/ {
|
|
# root /var/www/certbot;
|
|
# }
|
|
|
|
location / {
|
|
return 301 https://${DOLLAR}host${DOLLAR}request_uri;
|
|
}
|
|
}
|
|
|
|
server {
|
|
server_name ${ELEMENT_WEB_FQDN};
|
|
server_tokens off;
|
|
|
|
include /etc/nginx/conf.d/include/ssl.conf;
|
|
|
|
location / {
|
|
proxy_pass http://element-web;
|
|
}
|
|
}
|
|
|
|
server {
|
|
server_name ${ELEMENT_CALL_FQDN};
|
|
server_tokens off;
|
|
|
|
include /etc/nginx/conf.d/include/ssl.conf;
|
|
|
|
location / {
|
|
proxy_pass http://element-call;
|
|
}
|
|
}
|
|
|
|
server {
|
|
server_name ${MAS_FQDN};
|
|
server_tokens off;
|
|
|
|
include /etc/nginx/conf.d/include/ssl.conf;
|
|
|
|
location / {
|
|
proxy_pass http://matrix-authentication-service:8080;
|
|
}
|
|
}
|
|
|
|
server {
|
|
server_name ${HOMESERVER_FQDN};
|
|
server_tokens off;
|
|
|
|
include /etc/nginx/conf.d/include/ssl.conf;
|
|
|
|
# For the federation port
|
|
listen 8448 ssl default_server;
|
|
listen [::]:8448 ssl default_server;
|
|
|
|
# pass auth to MAS
|
|
location ~ ^/_matrix/client/(.*)/(login|logout|refresh) { proxy_pass http://matrix-authentication-service:8080; }
|
|
|
|
# use the generic worker as a synchrotron:
|
|
# taken from https://element-hq.github.io/synapse/latest/workers.html#synapseappgeneric_worker
|
|
location ~ ^/_matrix/client/(r0|v3)/sync${DOLLAR} { proxy_pass http://synapse-generic-worker-1:8081; }
|
|
location ~ ^/_matrix/client/(api/v1|r0|v3)/events${DOLLAR} { proxy_pass http://synapse-generic-worker-1:8081; }
|
|
location ~ ^/_matrix/client/(api/v1|r0|v3)/initialSync${DOLLAR} { proxy_pass http://synapse-generic-worker-1:8081; }
|
|
location ~ ^/_matrix/client/(api/v1|r0|v3)/rooms/[^/]+/initialSync${DOLLAR} { proxy_pass http://synapse-generic-worker-1:8081; }
|
|
|
|
location / {
|
|
proxy_pass http://synapse:8008;
|
|
proxy_set_header X-Forwarded-For ${DOLLAR}remote_addr;
|
|
proxy_set_header X-Forwarded-Proto ${DOLLAR}scheme;
|
|
proxy_set_header Host ${DOLLAR}host;
|
|
|
|
# Nginx by default only allows file uploads up to 1M in size
|
|
# Increase client_max_body_size to match max_upload_size defined in homeserver.yaml
|
|
client_max_body_size 50M;
|
|
}
|
|
|
|
location /.well-known {}
|
|
|
|
# Synapse responses may be chunked, which is an HTTP/1.1 feature.
|
|
proxy_http_version 1.1;
|
|
}
|
|
|