Commit Graph

283 Commits

Author SHA1 Message Date
Aleksandr Borisenko 0760253ebd xmpp: fix default directory for generated certs 2019-01-28 21:58:44 +01:00
Paul Tiedtke 0f0a9420a0 jigasi: make it completely optional 2019-01-28 21:58:44 +01:00
Saúl Ibarra Corretgé 19666889bd doc: update README 2018-12-10 08:52:41 +01:00
netaskd 072fb9d9d1 web: add strong ssl_ciphers and headers 2018-12-10 08:43:01 +01:00
netaskd 7c6c6bcefb web: enable ssl_protocol TLSv1.2 only 2018-12-04 19:56:09 +01:00
netaskd 4b88a28fcc jigasi: make SIP port and transport configurable 2018-12-04 13:05:48 +01:00
Paul Tiedtke ab5f248913 web: run cron only when HTTPS and Let's Encrypt are enabled 2018-12-03 10:06:36 +01:00
Dan Caseley da43e68854 jvb: add TCP Harvester configuration options 2018-11-29 19:43:07 +00:00
Saúl Ibarra Corretgé d6de4fdb58 web: fix typo 2018-11-07 15:34:42 +01:00
Saúl Ibarra Corretgé 0399c6dd15 misc: update TODO
The entry is covered by the more generic next one.
2018-11-07 14:28:19 +01:00
Saúl Ibarra Corretgé cda11bc52f web: add ability to redirect HTTP traffic to HTTPS
Useful if you're running this setup directly on the Internet, with a
Let's Encrypt certificate.
2018-11-07 14:27:22 +01:00
Saúl Ibarra Corretgé fcf83859e4 web: add ability to disable HTTPS
If TLS is terminated elsewhere and then connections are proxied over
HTTP, there is no need for it and it makes initialization a tad slower
on the first run.
2018-11-07 14:15:09 +01:00
Saúl Ibarra Corretgé 5c988de8b6 web: refactor nginx configuration 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé f61ef3f093 web: add builtin Let's Encrypt support 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé 2115bc0ed3 xmpp: remove unneeded files 2018-11-07 13:24:37 +01:00
Saúl Ibarra Corretgé ca47165807 web: move key generation to the main config script 2018-11-07 10:08:09 +01:00
Saúl Ibarra Corretgé 415f10406f web: split TLS configuration and make it stronger
Resources:

- https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- https://weakdh.org/sysadmin.html
2018-11-07 10:08:09 +01:00
Saúl Ibarra Corretgé c34b4814df web: fix formatting 2018-11-07 09:35:23 +01:00
Saúl Ibarra Corretgé 720f36c0fd xmpp: no need to add backports repository
It's now already there since it's in base.
2018-11-07 09:28:53 +01:00
Saúl Ibarra Corretgé f65016d6f1 base: add backports repository 2018-11-07 09:28:08 +01:00
Florent Poinsaut 1b4f23b4e2 misc: fix typo 2018-11-06 15:43:42 +01:00
Louis Sivillo e1bd2447ae jvb: add JVB_ENABLE_APIS env var 2018-11-05 18:11:29 +01:00
Saúl Ibarra Corretgé 05d9bb994a misc: declare container dependencies 2018-10-23 10:42:32 +02:00
Saúl Ibarra Corretgé a5412269c2 web: rename directory for web configuration 2018-10-23 10:30:03 +02:00
Saúl Ibarra Corretgé ee90a92d43 xmpp: add support for authentication 2018-10-18 12:08:30 +02:00
Saúl Ibarra Corretgé 136460578d doc: update diagrams 2018-10-18 11:37:03 +02:00
Saúl Ibarra Corretgé 4c237466d2 doc: add logo to README 2018-10-18 11:15:07 +02:00
Saúl Ibarra Corretgé 7dbbc75fed build: simplify Makefile 2018-10-18 10:15:57 +02:00
Saúl Ibarra Corretgé 1950e5bda6 doc: fix formatting issue in README 2018-10-17 23:08:33 +02:00
Saúl Ibarra Corretgé aefefb53b6 xmpp: disable HTTPS for BOSH
It's not exposed, we proxy from the web frontend.
2018-10-17 23:06:51 +02:00
Saúl Ibarra Corretgé 4b091b250d misc: remove unneeded env variable
Set it directly in the compose file, since it depends on the XMPP
server's hostname.
2018-10-17 23:06:51 +02:00
Saúl Ibarra Corretgé f34ebbb435 doc: update example env file and documentation 2018-10-17 12:04:12 +02:00
Saúl Ibarra Corretgé ebc96c627b build: add clean helper command 2018-10-17 11:59:53 +02:00
Saúl Ibarra Corretgé e78a4ed24a jigasi: add jigasi support for SIP audio calls 2018-10-17 11:59:53 +02:00
Saúl Ibarra Corretgé 9bb7340f66 jvb: use MUC connections for the JVB 2018-10-16 21:15:46 +02:00
Saúl Ibarra Corretgé 409f858496 jicofo: add logging configuration 2018-10-16 21:07:06 +02:00
Saúl Ibarra Corretgé c475d537e6 web: update config.js and interface_config.js 2018-10-03 07:40:14 +02:00
Saúl Ibarra Corretgé 0014a19c2f jvb: simplify setting NAT options 2018-10-03 07:31:37 +02:00
Saúl Ibarra Corretgé e8fde8cb8c core: make HTTP, HTTPS and JVB ports configurable 2018-09-19 22:14:20 +02:00
wlovins d7dce6240d misc: fix typo 2018-08-30 17:43:14 +02:00
Saúl Ibarra Corretgé dc95ca56df build: add helper for pushing all images 2018-08-17 11:04:04 +02:00
Saúl Ibarra Corretgé 0bc1a8b49c web: enable external API 2018-08-17 10:54:17 +02:00
Saúl Ibarra Corretgé 94a620baff xmpp: fix startup script if directory exists 2018-08-17 10:51:37 +02:00
Saúl Ibarra Corretgé 366bd3e4fe jvb: disable TCP harvester
TCP is to be handled by a TURN server, which provides other improvements like
P2P for 1-1 calls.
2018-08-09 23:29:27 +02:00
Saúl Ibarra Corretgé 271300a37e jvb: remove no longer needed dependency
It's now listed as a jvb dependency, so we don't need to install it explicitly.
2018-08-09 23:27:29 +02:00
Saúl Ibarra Corretgé 1a0aa07158 doc: updated README 2018-08-09 23:09:21 +02:00
Saúl Ibarra Corretgé 1010c71b33 core: rework templating
Use frep [0] which uses the Go templating capabilities.

[0]: https://github.com/subchen/frep
2018-08-09 21:43:54 +02:00
Saúl Ibarra Corretgé 36d98c9e17 doc: update README 2018-07-17 11:29:28 +02:00
Saúl Ibarra Corretgé 4ab82dce38 misc: add diagram 2018-07-17 11:29:00 +02:00
Saúl Ibarra Corretgé 41d8639c06 base: update s6 overlay version 2018-07-17 11:15:40 +02:00