Commit Graph

48 Commits

Author SHA1 Message Date
shanehughes1990
f8560371f5 web: add more config options 2020-12-16 14:42:40 +01:00
karniemi
eedac14370 web: add ability to disable IPv6 2020-12-09 16:35:21 +01:00
Mark
6a4887d7fc web: use env variables to set worker processes and connections
Use 2 new environment variables to allow setting the number of nginx worker processes and connections. Add the variables to the docker-compose file and to the nginx-conf where default values are also set.
2020-12-09 00:30:57 +01:00
Saúl Ibarra Corretgé
4cb181c1b2 web: install acme certs to persistent storage 2020-12-04 15:17:48 +01:00
Jonathan Lennox
b0cb4a1846 web: update TLS config to Mozilla security guidelines 2020-12-02 23:20:15 +01:00
Saúl Ibarra Corretgé
06012127e9 web: replace certbot with acme.sh
The former seems to be in a pretty bad state for usage with Debian based
containers:

- The Debian provided package is too old
- certbot-auto no longer works on Debian
- The recommended way of using snap is not Docker friendly

Thus, we are migrating to acme.sh, which has the advantage of also
making the web container slimmer.
2020-12-02 16:03:17 +01:00
D3473R
6b69576c2f web: add ability to configure tokenAuthUrl 2020-11-19 12:43:26 +01:00
Saúl Ibarra Corretgé
465816b4eb web,prosody: turn on XMPP WebSocket by default 2020-10-29 21:57:54 +01:00
Jan-Otto Kröpke
d747bfbe6b web,prosody: add XMPP WebSocket / Stream Management support 2020-10-29 21:44:48 +01:00
Saúl Ibarra Corretgé
7ab45bbb37 web: add ability to configure prejoin page 2020-10-16 15:28:20 +02:00
Paul Tiedtke
b277926332 jvb: make colibri websocket endpoints dynamic for multiple jvbs 2020-10-16 15:08:20 +02:00
Saúl Ibarra Corretgé
991f695275 web: remove no longer needed settings
They default to true now and they have been removed.
2020-10-16 14:22:29 +02:00
Ludovic Muller
087f024fcb web: configure brandingDataUrl with env variables 2020-10-08 10:13:44 +02:00
NullIsNot0
a404653197 web: configure startAudioOnly using environment variable 2020-10-08 10:12:12 +02:00
Ludovic Muller
409cade8ec web: configure Matomo using environment variables 2020-10-08 10:09:38 +02:00
Ludovic Muller
5ceaf5fd02 web: add IPv6 support 2020-10-02 16:56:20 +02:00
Saúl Ibarra Corretgé
ad5625bb09 jvb: switch to WebSocket based bridge channels 2020-10-02 16:45:21 +02:00
Saúl Ibarra Corretgé
81103362b5 web: add ability to configure the nginx resolver 2020-10-02 16:45:21 +02:00
Aaron van Meerten
c149463823 web: build config.js on each boot
Co-authored-by: Saúl Ibarra Corretgé <saghul@jitsi.org>
2020-10-02 15:25:44 +02:00
Jakub Onderka
2a0120de8b web: set security headers also for non HTTPS
Fixes: #493
2020-07-22 17:23:23 +02:00
Jakub Onderka
125775a737 web: fix WASM MIME type 2020-04-22 10:52:53 +02:00
Jakub Onderka
e70975e692 web: enable GZIP compression for more file types 2020-04-22 10:51:58 +02:00
Saúl Ibarra Corretgé
b039b29b7a web: use certbot-auto 2020-04-15 21:56:40 +02:00
Amin Vakil
b95c95de0e web: improve nginx configuration
* Enable http2 by default
* Disable server_tokens by default
2020-04-15 12:09:28 +02:00
Hanno Böck
dc46215600 web: remove DHE suites support
Ref: https://github.com/jitsi/docker-jitsi-meet/issues/433
2020-04-14 16:59:19 +02:00
Saúl Ibarra Corretgé
655cf6be4a web,prosody,jvb: prepare for new stable release 2020-03-27 22:12:25 +01:00
Timon Engelke
8fa9f942ac web: update nginx config from upstream 2020-03-24 09:02:48 +01:00
Saúl Ibarra Corretgé
edf9630950 web: update config files 2019-08-22 12:34:14 +02:00
netaskd
62f2d11cab web,etherpad: add etherpad addon for sharing document 2019-08-07 22:48:47 +02:00
Saúl Ibarra Corretgé
7f00c8e7a2 web: sync Jitsi Meet configuration 2019-02-13 10:50:17 +01:00
netaskd
bb7f68a749 web: update config.js from upstream 2019-02-12 10:04:12 +01:00
Saúl Ibarra Corretgé
30c425811e misc: fix handling boolean values
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/30
2019-01-28 23:11:03 +01:00
netaskd
072fb9d9d1 web: add strong ssl_ciphers and headers 2018-12-10 08:43:01 +01:00
netaskd
7c6c6bcefb web: enable ssl_protocol TLSv1.2 only 2018-12-04 19:56:09 +01:00
Saúl Ibarra Corretgé
d6de4fdb58 web: fix typo 2018-11-07 15:34:42 +01:00
Saúl Ibarra Corretgé
cda11bc52f web: add ability to redirect HTTP traffic to HTTPS
Useful if you're running this setup directly on the Internet, with a
Let's Encrypt certificate.
2018-11-07 14:27:22 +01:00
Saúl Ibarra Corretgé
fcf83859e4 web: add ability to disable HTTPS
If TLS is terminated elsewhere and then connections are proxied over
HTTP, there is no need for it and it makes initialization a tad slower
on the first run.
2018-11-07 14:15:09 +01:00
Saúl Ibarra Corretgé
5c988de8b6 web: refactor nginx configuration 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé
f61ef3f093 web: add builtin Let's Encrypt support 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé
415f10406f web: split TLS configuration and make it stronger
Resources:

- https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- https://weakdh.org/sysadmin.html
2018-11-07 10:08:09 +01:00
Saúl Ibarra Corretgé
c34b4814df web: fix formatting 2018-11-07 09:35:23 +01:00
Saúl Ibarra Corretgé
c475d537e6 web: update config.js and interface_config.js 2018-10-03 07:40:14 +02:00
Saúl Ibarra Corretgé
0bc1a8b49c web: enable external API 2018-08-17 10:54:17 +02:00
Saúl Ibarra Corretgé
1010c71b33 core: rework templating
Use frep [0] which uses the Go templating capabilities.

[0]: https://github.com/subchen/frep
2018-08-09 21:43:54 +02:00
Saúl Ibarra Corretgé
9adeab8039 web: update config.js and interface_config.js 2018-07-17 10:39:54 +02:00
Saúl Ibarra Corretgé
50863f3ea2 web: add ability to customize interface_config.js 2018-05-04 08:29:46 +02:00
Saúl Ibarra Corretgé
c6cc67b68d Use an unaltered config.js file
Make all the necessary changes outside, setting the bosh URL
in this case.
2018-03-14 11:37:09 +01:00
Saúl Ibarra Corretgé
467a149cbb Initial import 2018-03-14 10:23:50 +01:00