Commit Graph

47 Commits

Author SHA1 Message Date
Jakub Onderka 2a0120de8b
web: set security headers also for non HTTPS
Fixes: #493
2020-07-22 17:23:23 +02:00
Nickolay V. Shmyrev baed605569
web: fix removing closed captions button if transcription is enabled 2020-07-02 09:59:08 +02:00
Mathieu Brunot edecacd0c0
etherpad: add ability to use a external server 2020-06-27 16:21:31 +02:00
Jakub Onderka 125775a737
web: fix WASM MIME type 2020-04-22 10:52:53 +02:00
Jakub Onderka e70975e692
web: enable GZIP compression for more file types 2020-04-22 10:51:58 +02:00
Saúl Ibarra Corretgé b039b29b7a web: use certbot-auto 2020-04-15 21:56:40 +02:00
Amin Vakil b95c95de0e
web: improve nginx configuration
* Enable http2 by default
* Disable server_tokens by default
2020-04-15 12:09:28 +02:00
Hanno Böck dc46215600
web: remove DHE suites support
Ref: https://github.com/jitsi/docker-jitsi-meet/issues/433
2020-04-14 16:59:19 +02:00
Saúl Ibarra Corretgé 2c95ab7c9f web: revert using PUBLIC_URL for BOSH URL
This partially reverts
5e6faced4f

It was unnecessary, and created lot of trouble.
2020-04-14 11:17:05 +02:00
Saúl Ibarra Corretgé 5e6faced4f web: use PUBLIC_URL for etherpaad base and BOSH URLs 2020-03-28 15:40:25 +01:00
Saúl Ibarra Corretgé 655cf6be4a web,prosody,jvb: prepare for new stable release 2020-03-27 22:12:25 +01:00
Frank Sachsenheim cd4a071ed4
web: check for certbot's success and exit in case of a failure 2020-03-24 22:45:55 +01:00
Timon Engelke 8fa9f942ac
web: update nginx config from upstream 2020-03-24 09:02:48 +01:00
Paul Tiedtke 986071b100 jigasi: add missing transcription volumes to dockerfile 2020-02-21 17:24:22 +01:00
Matthias Herzog 9b17c0548d web: fix letsencrypt renewal 2020-01-08 15:58:51 +00:00
netaskd ffa017b74d jibri: add jibri service 2019-12-04 14:53:59 +01:00
netaskd 8352559f50 misc: add ARG JITSI_REPO for dependented dockerfiles 2019-09-03 19:07:55 +02:00
netaskd 2b30ab9a23 misc: add variable JITSI_REPO instead hardcoded jitsi 2019-09-03 17:14:50 +02:00
Saúl Ibarra Corretgé edf9630950 web: update config files 2019-08-22 12:34:14 +02:00
netaskd e48bf46f7c jigasi,web: add transcription options 2019-08-07 23:02:30 +02:00
netaskd 62f2d11cab web,etherpad: add etherpad addon for sharing document 2019-08-07 22:48:47 +02:00
Matthias Herzog e6eecce2af web: add letsencrypt volume 2019-07-08 20:32:40 +02:00
Saúl Ibarra Corretgé 7f00c8e7a2 web: sync Jitsi Meet configuration 2019-02-13 10:50:17 +01:00
netaskd bb7f68a749 web: update config.js from upstream 2019-02-12 10:04:12 +01:00
Saúl Ibarra Corretgé 30c425811e misc: fix handling boolean values
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/30
2019-01-28 23:11:03 +01:00
netaskd 072fb9d9d1 web: add strong ssl_ciphers and headers 2018-12-10 08:43:01 +01:00
netaskd 7c6c6bcefb web: enable ssl_protocol TLSv1.2 only 2018-12-04 19:56:09 +01:00
Paul Tiedtke ab5f248913 web: run cron only when HTTPS and Let's Encrypt are enabled 2018-12-03 10:06:36 +01:00
Saúl Ibarra Corretgé d6de4fdb58 web: fix typo 2018-11-07 15:34:42 +01:00
Saúl Ibarra Corretgé cda11bc52f web: add ability to redirect HTTP traffic to HTTPS
Useful if you're running this setup directly on the Internet, with a
Let's Encrypt certificate.
2018-11-07 14:27:22 +01:00
Saúl Ibarra Corretgé fcf83859e4 web: add ability to disable HTTPS
If TLS is terminated elsewhere and then connections are proxied over
HTTP, there is no need for it and it makes initialization a tad slower
on the first run.
2018-11-07 14:15:09 +01:00
Saúl Ibarra Corretgé 5c988de8b6 web: refactor nginx configuration 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé f61ef3f093 web: add builtin Let's Encrypt support 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé ca47165807 web: move key generation to the main config script 2018-11-07 10:08:09 +01:00
Saúl Ibarra Corretgé 415f10406f web: split TLS configuration and make it stronger
Resources:

- https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- https://weakdh.org/sysadmin.html
2018-11-07 10:08:09 +01:00
Saúl Ibarra Corretgé c34b4814df web: fix formatting 2018-11-07 09:35:23 +01:00
Saúl Ibarra Corretgé ee90a92d43 xmpp: add support for authentication 2018-10-18 12:08:30 +02:00
Saúl Ibarra Corretgé c475d537e6 web: update config.js and interface_config.js 2018-10-03 07:40:14 +02:00
Saúl Ibarra Corretgé 0bc1a8b49c web: enable external API 2018-08-17 10:54:17 +02:00
Saúl Ibarra Corretgé 1010c71b33 core: rework templating
Use frep [0] which uses the Go templating capabilities.

[0]: https://github.com/subchen/frep
2018-08-09 21:43:54 +02:00
Saúl Ibarra Corretgé 9adeab8039 web: update config.js and interface_config.js 2018-07-17 10:39:54 +02:00
Saúl Ibarra Corretgé 50863f3ea2 web: add ability to customize interface_config.js 2018-05-04 08:29:46 +02:00
Saúl Ibarra Corretgé 822cca7d39 xmpp: add ability to customize the XMPP MUC domain 2018-04-28 17:42:37 +02:00
Saúl Ibarra Corretgé 0e43efa17e build: add ability to force rebuilds and select releases 2018-04-27 09:55:14 +02:00
Saúl Ibarra Corretgé 84332c9527 xmpp: add ability to customize the jicofo auth user 2018-04-26 08:38:59 +02:00
Saúl Ibarra Corretgé c6cc67b68d Use an unaltered config.js file
Make all the necessary changes outside, setting the bosh URL
in this case.
2018-03-14 11:37:09 +01:00
Saúl Ibarra Corretgé 467a149cbb Initial import 2018-03-14 10:23:50 +01:00