Commit Graph

173 Commits

Author SHA1 Message Date
Cosmo Myzrail Gorynych aka CoMiGo
0b2514101c web: Add ENABLE_HSTS flag to disable strict-transport-security header 2020-12-17 09:32:54 +01:00
shanehughes1990
f8560371f5 web: add more config options 2020-12-16 14:42:40 +01:00
karniemi
eedac14370 web: add ability to disable IPv6 2020-12-09 16:35:21 +01:00
Mark
6a4887d7fc web: use env variables to set worker processes and connections
Use 2 new environment variables to allow setting the number of nginx worker processes and connections. Add the variables to the docker-compose file and to the nginx-conf where default values are also set.
2020-12-09 00:30:57 +01:00
Saúl Ibarra Corretgé
700c04a629 web: properly handle acme.sh return codes
It exits with 2 in case a renew is not necessary.
2020-12-04 15:40:18 +01:00
Saúl Ibarra Corretgé
4cb181c1b2 web: install acme certs to persistent storage 2020-12-04 15:17:48 +01:00
Saúl Ibarra Corretgé
1d2c68a32f web: fix running acme.sh on the right home directory 2020-12-04 15:17:04 +01:00
Jonathan Lennox
b0cb4a1846 web: update TLS config to Mozilla security guidelines 2020-12-02 23:20:15 +01:00
Saúl Ibarra Corretgé
06012127e9 web: replace certbot with acme.sh
The former seems to be in a pretty bad state for usage with Debian based
containers:

- The Debian provided package is too old
- certbot-auto no longer works on Debian
- The recommended way of using snap is not Docker friendly

Thus, we are migrating to acme.sh, which has the advantage of also
making the web container slimmer.
2020-12-02 16:03:17 +01:00
Saúl Ibarra Corretgé
43f678d967 build: refactor Makefile
Use a single one with dynamically generated rules instead of individual
makefiles which are 99% boilerplate.
2020-12-02 16:03:17 +01:00
Saúl Ibarra Corretgé
b00f92ae19 web: use Python 3 only for certbot
certbot-auto will install both Python 2 and 3 packages thus resulting un
unnecessary image bloat. Also, there is no need to install compilers or
development libraries since Wheels are available for the required
packags.
2020-12-02 16:03:17 +01:00
mammo0
ba011900fb web: prevent s6 from restarting cron if it shouldn't be run 2020-12-02 12:58:19 +01:00
Felix Geyer
c36c4d02a7 web: always rebuild nginx configs on start 2020-11-27 21:31:20 +01:00
D3473R
6b69576c2f web: add ability to configure tokenAuthUrl 2020-11-19 12:43:26 +01:00
Saúl Ibarra Corretgé
465816b4eb web,prosody: turn on XMPP WebSocket by default 2020-10-29 21:57:54 +01:00
Jan-Otto Kröpke
d747bfbe6b web,prosody: add XMPP WebSocket / Stream Management support 2020-10-29 21:44:48 +01:00
Saúl Ibarra Corretgé
7ab45bbb37 web: add ability to configure prejoin page 2020-10-16 15:28:20 +02:00
Paul Tiedtke
b277926332 jvb: make colibri websocket endpoints dynamic for multiple jvbs 2020-10-16 15:08:20 +02:00
Saúl Ibarra Corretgé
991f695275 web: remove no longer needed settings
They default to true now and they have been removed.
2020-10-16 14:22:29 +02:00
Ludovic Muller
087f024fcb web: configure brandingDataUrl with env variables 2020-10-08 10:13:44 +02:00
NullIsNot0
a404653197 web: configure startAudioOnly using environment variable 2020-10-08 10:12:12 +02:00
Ludovic Muller
409cade8ec web: configure Matomo using environment variables 2020-10-08 10:09:38 +02:00
Ludovic Muller
5ceaf5fd02 web: add IPv6 support 2020-10-02 16:56:20 +02:00
Saúl Ibarra Corretgé
ad5625bb09 jvb: switch to WebSocket based bridge channels 2020-10-02 16:45:21 +02:00
Saúl Ibarra Corretgé
81103362b5 web: add ability to configure the nginx resolver 2020-10-02 16:45:21 +02:00
Aaron van Meerten
c149463823 web: build config.js on each boot
Co-authored-by: Saúl Ibarra Corretgé <saghul@jitsi.org>
2020-10-02 15:25:44 +02:00
Jakub Onderka
2a0120de8b web: set security headers also for non HTTPS
Fixes: #493
2020-07-22 17:23:23 +02:00
Nickolay V. Shmyrev
baed605569 web: fix removing closed captions button if transcription is enabled 2020-07-02 09:59:08 +02:00
Mathieu Brunot
edecacd0c0 etherpad: add ability to use a external server 2020-06-27 16:21:31 +02:00
Jakub Onderka
125775a737 web: fix WASM MIME type 2020-04-22 10:52:53 +02:00
Jakub Onderka
e70975e692 web: enable GZIP compression for more file types 2020-04-22 10:51:58 +02:00
Saúl Ibarra Corretgé
b039b29b7a web: use certbot-auto 2020-04-15 21:56:40 +02:00
Amin Vakil
b95c95de0e web: improve nginx configuration
* Enable http2 by default
* Disable server_tokens by default
2020-04-15 12:09:28 +02:00
Hanno Böck
dc46215600 web: remove DHE suites support
Ref: https://github.com/jitsi/docker-jitsi-meet/issues/433
2020-04-14 16:59:19 +02:00
Saúl Ibarra Corretgé
2c95ab7c9f web: revert using PUBLIC_URL for BOSH URL
This partially reverts
5e6faced4f

It was unnecessary, and created lot of trouble.
2020-04-14 11:17:05 +02:00
Saúl Ibarra Corretgé
5e6faced4f web: use PUBLIC_URL for etherpaad base and BOSH URLs 2020-03-28 15:40:25 +01:00
Saúl Ibarra Corretgé
655cf6be4a web,prosody,jvb: prepare for new stable release 2020-03-27 22:12:25 +01:00
Frank Sachsenheim
cd4a071ed4 web: check for certbot's success and exit in case of a failure 2020-03-24 22:45:55 +01:00
Timon Engelke
8fa9f942ac web: update nginx config from upstream 2020-03-24 09:02:48 +01:00
Paul Tiedtke
986071b100 jigasi: add missing transcription volumes to dockerfile 2020-02-21 17:24:22 +01:00
Matthias Herzog
9b17c0548d web: fix letsencrypt renewal 2020-01-08 15:58:51 +00:00
netaskd
ffa017b74d jibri: add jibri service 2019-12-04 14:53:59 +01:00
netaskd
8352559f50 misc: add ARG JITSI_REPO for dependented dockerfiles 2019-09-03 19:07:55 +02:00
netaskd
2b30ab9a23 misc: add variable JITSI_REPO instead hardcoded jitsi 2019-09-03 17:14:50 +02:00
Saúl Ibarra Corretgé
edf9630950 web: update config files 2019-08-22 12:34:14 +02:00
netaskd
e48bf46f7c jigasi,web: add transcription options 2019-08-07 23:02:30 +02:00
netaskd
62f2d11cab web,etherpad: add etherpad addon for sharing document 2019-08-07 22:48:47 +02:00
Matthias Herzog
e6eecce2af web: add letsencrypt volume 2019-07-08 20:32:40 +02:00
Saúl Ibarra Corretgé
7f00c8e7a2 web: sync Jitsi Meet configuration 2019-02-13 10:50:17 +01:00
netaskd
bb7f68a749 web: update config.js from upstream 2019-02-12 10:04:12 +01:00