karniemi
eedac14370
web: add ability to disable IPv6
4 years ago
Mark
6a4887d7fc
web: use env variables to set worker processes and connections
...
Use 2 new environment variables to allow setting the number of nginx worker processes and connections. Add the variables to the docker-compose file and to the nginx-conf where default values are also set.
4 years ago
Saúl Ibarra Corretgé
4cb181c1b2
web: install acme certs to persistent storage
4 years ago
Jonathan Lennox
b0cb4a1846
web: update TLS config to Mozilla security guidelines
4 years ago
Saúl Ibarra Corretgé
06012127e9
web: replace certbot with acme.sh
...
The former seems to be in a pretty bad state for usage with Debian based
containers:
- The Debian provided package is too old
- certbot-auto no longer works on Debian
- The recommended way of using snap is not Docker friendly
Thus, we are migrating to acme.sh, which has the advantage of also
making the web container slimmer.
4 years ago
D3473R
6b69576c2f
web: add ability to configure tokenAuthUrl
4 years ago
Saúl Ibarra Corretgé
465816b4eb
web,prosody: turn on XMPP WebSocket by default
4 years ago
Jan-Otto Kröpke
d747bfbe6b
web,prosody: add XMPP WebSocket / Stream Management support
4 years ago
Saúl Ibarra Corretgé
7ab45bbb37
web: add ability to configure prejoin page
4 years ago
Paul Tiedtke
b277926332
jvb: make colibri websocket endpoints dynamic for multiple jvbs
4 years ago
Saúl Ibarra Corretgé
991f695275
web: remove no longer needed settings
...
They default to true now and they have been removed.
4 years ago
Ludovic Muller
087f024fcb
web: configure brandingDataUrl with env variables
4 years ago
NullIsNot0
a404653197
web: configure startAudioOnly using environment variable
4 years ago
Ludovic Muller
409cade8ec
web: configure Matomo using environment variables
4 years ago
Ludovic Muller
5ceaf5fd02
web: add IPv6 support
4 years ago
Saúl Ibarra Corretgé
ad5625bb09
jvb: switch to WebSocket based bridge channels
4 years ago
Saúl Ibarra Corretgé
81103362b5
web: add ability to configure the nginx resolver
4 years ago
Aaron van Meerten
c149463823
web: build config.js on each boot
...
Co-authored-by: Saúl Ibarra Corretgé <saghul@jitsi.org>
4 years ago
Jakub Onderka
2a0120de8b
web: set security headers also for non HTTPS
...
Fixes : #493
5 years ago
Jakub Onderka
125775a737
web: fix WASM MIME type
5 years ago
Jakub Onderka
e70975e692
web: enable GZIP compression for more file types
5 years ago
Saúl Ibarra Corretgé
b039b29b7a
web: use certbot-auto
5 years ago
Amin Vakil
b95c95de0e
web: improve nginx configuration
...
* Enable http2 by default
* Disable server_tokens by default
5 years ago
Hanno Böck
dc46215600
web: remove DHE suites support
...
Ref: https://github.com/jitsi/docker-jitsi-meet/issues/433
5 years ago
Saúl Ibarra Corretgé
655cf6be4a
web,prosody,jvb: prepare for new stable release
5 years ago
Timon Engelke
8fa9f942ac
web: update nginx config from upstream
5 years ago
Saúl Ibarra Corretgé
edf9630950
web: update config files
6 years ago
netaskd
62f2d11cab
web,etherpad: add etherpad addon for sharing document
6 years ago
Saúl Ibarra Corretgé
7f00c8e7a2
web: sync Jitsi Meet configuration
6 years ago
netaskd
bb7f68a749
web: update config.js from upstream
6 years ago
Saúl Ibarra Corretgé
30c425811e
misc: fix handling boolean values
...
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/30
6 years ago
netaskd
072fb9d9d1
web: add strong ssl_ciphers and headers
6 years ago
netaskd
7c6c6bcefb
web: enable ssl_protocol TLSv1.2 only
6 years ago
Saúl Ibarra Corretgé
d6de4fdb58
web: fix typo
6 years ago
Saúl Ibarra Corretgé
cda11bc52f
web: add ability to redirect HTTP traffic to HTTPS
...
Useful if you're running this setup directly on the Internet, with a
Let's Encrypt certificate.
6 years ago
Saúl Ibarra Corretgé
fcf83859e4
web: add ability to disable HTTPS
...
If TLS is terminated elsewhere and then connections are proxied over
HTTP, there is no need for it and it makes initialization a tad slower
on the first run.
6 years ago
Saúl Ibarra Corretgé
5c988de8b6
web: refactor nginx configuration
6 years ago
Saúl Ibarra Corretgé
f61ef3f093
web: add builtin Let's Encrypt support
6 years ago
Saúl Ibarra Corretgé
415f10406f
web: split TLS configuration and make it stronger
...
Resources:
- https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- https://weakdh.org/sysadmin.html
6 years ago
Saúl Ibarra Corretgé
c34b4814df
web: fix formatting
6 years ago
Saúl Ibarra Corretgé
c475d537e6
web: update config.js and interface_config.js
6 years ago
Saúl Ibarra Corretgé
0bc1a8b49c
web: enable external API
7 years ago
Saúl Ibarra Corretgé
1010c71b33
core: rework templating
...
Use frep [0] which uses the Go templating capabilities.
[0]: https://github.com/subchen/frep
7 years ago
Saúl Ibarra Corretgé
9adeab8039
web: update config.js and interface_config.js
7 years ago
Saúl Ibarra Corretgé
50863f3ea2
web: add ability to customize interface_config.js
7 years ago
Saúl Ibarra Corretgé
c6cc67b68d
Use an unaltered config.js file
...
Make all the necessary changes outside, setting the bosh URL
in this case.
7 years ago
Saúl Ibarra Corretgé
467a149cbb
Initial import
7 years ago