8e2964b006
xmpp: fix storage backend on prosody 0.11
6 years ago
0760253ebd
xmpp: fix default directory for generated certs
6 years ago
0f0a9420a0
jigasi: make it completely optional
6 years ago
19666889bd
doc: update README
6 years ago
072fb9d9d1
web: add strong ssl_ciphers and headers
6 years ago
7c6c6bcefb
web: enable ssl_protocol TLSv1.2 only
6 years ago
4b88a28fcc
jigasi: make SIP port and transport configurable
6 years ago
ab5f248913
web: run cron only when HTTPS and Let's Encrypt are enabled
6 years ago
da43e68854
jvb: add TCP Harvester configuration options
6 years ago
d6de4fdb58
web: fix typo
6 years ago
0399c6dd15
misc: update TODO
...
The entry is covered by the more generic next one.
6 years ago
cda11bc52f
web: add ability to redirect HTTP traffic to HTTPS
...
Useful if you're running this setup directly on the Internet, with a
Let's Encrypt certificate.
6 years ago
fcf83859e4
web: add ability to disable HTTPS
...
If TLS is terminated elsewhere and then connections are proxied over
HTTP, there is no need for it and it makes initialization a tad slower
on the first run.
6 years ago
5c988de8b6
web: refactor nginx configuration
6 years ago
f61ef3f093
web: add builtin Let's Encrypt support
6 years ago
2115bc0ed3
xmpp: remove unneeded files
6 years ago
ca47165807
web: move key generation to the main config script
6 years ago
415f10406f
web: split TLS configuration and make it stronger
...
Resources:
- https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- https://weakdh.org/sysadmin.html
6 years ago
c34b4814df
web: fix formatting
6 years ago
720f36c0fd
xmpp: no need to add backports repository
...
It's now already there since it's in base.
6 years ago
f65016d6f1
base: add backports repository
6 years ago
1b4f23b4e2
misc: fix typo
6 years ago
e1bd2447ae
jvb: add JVB_ENABLE_APIS env var
6 years ago
05d9bb994a
misc: declare container dependencies
6 years ago
a5412269c2
web: rename directory for web configuration
6 years ago
ee90a92d43
xmpp: add support for authentication
6 years ago
136460578d
doc: update diagrams
6 years ago
4c237466d2
doc: add logo to README
6 years ago
7dbbc75fed
build: simplify Makefile
6 years ago
1950e5bda6
doc: fix formatting issue in README
6 years ago
aefefb53b6
xmpp: disable HTTPS for BOSH
...
It's not exposed, we proxy from the web frontend.
6 years ago
4b091b250d
misc: remove unneeded env variable
...
Set it directly in the compose file, since it depends on the XMPP
server's hostname.
6 years ago
f34ebbb435
doc: update example env file and documentation
6 years ago
ebc96c627b
build: add clean helper command
6 years ago
e78a4ed24a
jigasi: add jigasi support for SIP audio calls
6 years ago
9bb7340f66
jvb: use MUC connections for the JVB
6 years ago
409f858496
jicofo: add logging configuration
6 years ago
c475d537e6
web: update config.js and interface_config.js
6 years ago
0014a19c2f
jvb: simplify setting NAT options
6 years ago
e8fde8cb8c
core: make HTTP, HTTPS and JVB ports configurable
6 years ago
d7dce6240d
misc: fix typo
6 years ago
dc95ca56df
build: add helper for pushing all images
6 years ago
0bc1a8b49c
web: enable external API
6 years ago
94a620baff
xmpp: fix startup script if directory exists
6 years ago
366bd3e4fe
jvb: disable TCP harvester
...
TCP is to be handled by a TURN server, which provides other improvements like
P2P for 1-1 calls.
6 years ago
271300a37e
jvb: remove no longer needed dependency
...
It's now listed as a jvb dependency, so we don't need to install it explicitly.
6 years ago
1a0aa07158
doc: updated README
6 years ago
1010c71b33
core: rework templating
...
Use frep [0] which uses the Go templating capabilities.
[0]: https://github.com/subchen/frep
6 years ago
36d98c9e17
doc: update README
6 years ago
4ab82dce38
misc: add diagram
6 years ago
Saúl Ibarra Corretgé
Aleksandr Borisenko
Paul Tiedtke
netaskd
Dan Caseley
Florent Poinsaut
Louis Sivillo
Saúl Ibarra Corretgé
wlovins