pub-solar/matrix-docker-ansible-deploy
5
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
matrix-docker-ansible-deploy/examples/apache/matrix-client-element.conf

42 lines
1.2 KiB
Plaintext
Raw Normal View History

Riot is now Element Fixes #586 (Github Issue)
2020-07-17 08:31:20 +00:00
# This is a sample file demonstrating how to set up reverse-proxy for element.DOMAIN.
# If you're not using Element (`matrix_client_element_enabled: false`), you won't need this.
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
<VirtualHost *:80>
Riot is now Element Fixes #586 (Github Issue)
2020-07-17 08:31:20 +00:00
ServerName element.DOMAIN
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
Fix syntax problems in example Apache configuration Related to #121 (Github Issue)
2019-03-18 18:45:17 +00:00
ProxyVia On
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
# Map /.well-known/acme-challenge to the certbot server
# If you manage SSL certificates by yourself, this will differ.
<Location /.well-known/acme-challenge>
ProxyPreserveHost On
Remove some more references to localhost Continuation of 1f0cc92b330b42. As an explanation for the problem: when saying `localhost` on the host, it sometimes gets resolved to `::1` and sometimes to `127.0.0.1`. On the unfortunate occassions that it gets resolved to `::1`, the container won't be able to serve the request, because Docker containers don't have IPv6 enabled by default. To avoid this problem, we simply prevent any lookups from happening and explicitly use `127.0.0.1`.
2019-02-05 09:11:28 +00:00
ProxyPass http://127.0.0.1:2402/.well-known/acme-challenge
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
</Location>
Riot is now Element Fixes #586 (Github Issue)
2020-07-17 08:31:20 +00:00
Redirect permanent / https://element.DOMAIN/
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
</VirtualHost>
<VirtualHost *:443>
Riot is now Element Fixes #586 (Github Issue)
2020-07-17 08:31:20 +00:00
ServerName element.DOMAIN
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
SSLEngine On
# If you manage SSL certificates by yourself, these paths will differ.
Riot is now Element Fixes #586 (Github Issue)
2020-07-17 08:31:20 +00:00
SSLCertificateFile /matrix/ssl/config/live/element.DOMAIN/fullchain.pem
SSLCertificateKeyFile /matrix/ssl/config/live/element.DOMAIN/privkey.pem
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
SSLProxyEngine on
Disable TLSv1.1 by default
2020-01-30 10:56:20 +00:00
SSLProxyProtocol +TLSv1.2 +TLSv1.3
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
ProxyPreserveHost On
ProxyRequests Off
ProxyVia On
Remove some more references to localhost Continuation of 1f0cc92b330b42. As an explanation for the problem: when saying `localhost` on the host, it sometimes gets resolved to `::1` and sometimes to `127.0.0.1`. On the unfortunate occassions that it gets resolved to `::1`, the container won't be able to serve the request, because Docker containers don't have IPv6 enabled by default. To avoid this problem, we simply prevent any lookups from happening and explicitly use `127.0.0.1`.
2019-02-05 09:11:28 +00:00
ProxyPass / http://127.0.0.1:8765/
ProxyPassReverse / http://127.0.0.1:8765/
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
Riot is now Element Fixes #586 (Github Issue)
2020-07-17 08:31:20 +00:00
ErrorLog ${APACHE_LOG_DIR}/element.DOMAIN-error.log
CustomLog ${APACHE_LOG_DIR}/element.DOMAIN-access.log combined
Update own-webserver guide and add sample Apache configuration This supersedes #59 (Github Pull Request), which was greatly beneficial in creating our sample Apache configuration.
2019-02-01 14:51:18 +00:00
</VirtualHost>
Reference in a new issue Copy permalink