diff options
author | Alex Auvolat <alex@adnab.me> | 2022-08-23 18:00:07 +0200 |
---|---|---|
committer | Alex Auvolat <alex@adnab.me> | 2022-08-23 18:00:07 +0200 |
commit | 5994e41ad1fdba931ae488d8e0efb13f3e505c18 (patch) | |
tree | 342f432cc0a4598570672f7f8d66d7fa400aa693 /app/jitsi/integration/meet/nginx.conf | |
parent | 02b1e6200c6f2acf85e4471ea341adde8e93ec9c (diff) | |
download | nixcfg-5994e41ad1fdba931ae488d8e0efb13f3e505c18.tar.gz nixcfg-5994e41ad1fdba931ae488d8e0efb13f3e505c18.zip |
Add jitsi
Diffstat (limited to 'app/jitsi/integration/meet/nginx.conf')
-rw-r--r-- | app/jitsi/integration/meet/nginx.conf | 72 |
1 files changed, 72 insertions, 0 deletions
diff --git a/app/jitsi/integration/meet/nginx.conf b/app/jitsi/integration/meet/nginx.conf new file mode 100644 index 0000000..16a63f9 --- /dev/null +++ b/app/jitsi/integration/meet/nginx.conf @@ -0,0 +1,72 @@ +# some doc: https://www.nginx.com/resources/wiki/start/topics/examples/full/ +error_log /dev/stderr; + +events {} + +http { + ## + # Basic Settings + ## + sendfile on; + tcp_nopush on; + tcp_nodelay on; + keepalive_timeout 65; + types_hash_max_size 2048; + + + # mimetypes, required by jitsi! + include /etc/nginx/mime.types; + default_type application/octet-stream; + + types { + application/wasm wasm; + } + + ## + # SSL Settings + ## + + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE + ssl_prefer_server_ciphers on; + + ## + # Gzip Settings + ## + gzip on; + + access_log /dev/stdout; + server_names_hash_bucket_size 64; + + server { + listen 0.0.0.0:443 ssl http2 default_server; + listen [::]:443 ssl http2 default_server; + server_name _; + ssl_certificate /etc/nginx/jitsi.crt; + ssl_certificate_key /etc/nginx/jitsi.key; + root /srv/jitsi-meet; + index index.html; + + # lot of work would be needed to improve location rules + # - in order to allow - and _ in the URL, even space + # - while not shadowing other files (.js and following locations) + # - passed some times twice on the problem, not as easy as it seems + location ~ ^/([a-zA-Z0-9=\?]+)$ { + rewrite ^/(.*)$ / break; + } + location / { + ssi on; + } + + location /external_api.js { + alias /srv/jitsi-meet/libs/external_api.min.js; + } + + location /http-bind { + proxy_pass http://jitsi-xmpp:5280/http-bind; + proxy_set_header X-Forwarded-For \$remote_addr; + proxy_set_header Host \$http_host; + } + + + } +} |