Commit Graph

47 Commits

Author SHA1 Message Date
Jakub Onderka
2a0120de8b
web: set security headers also for non HTTPS
Fixes: #493
2020-07-22 17:23:23 +02:00
Nickolay V. Shmyrev
baed605569
web: fix removing closed captions button if transcription is enabled 2020-07-02 09:59:08 +02:00
Mathieu Brunot
edecacd0c0
etherpad: add ability to use a external server 2020-06-27 16:21:31 +02:00
Jakub Onderka
125775a737
web: fix WASM MIME type 2020-04-22 10:52:53 +02:00
Jakub Onderka
e70975e692
web: enable GZIP compression for more file types 2020-04-22 10:51:58 +02:00
Saúl Ibarra Corretgé
b039b29b7a web: use certbot-auto 2020-04-15 21:56:40 +02:00
Amin Vakil
b95c95de0e
web: improve nginx configuration
* Enable http2 by default
* Disable server_tokens by default
2020-04-15 12:09:28 +02:00
Hanno Böck
dc46215600
web: remove DHE suites support
Ref: https://github.com/jitsi/docker-jitsi-meet/issues/433
2020-04-14 16:59:19 +02:00
Saúl Ibarra Corretgé
2c95ab7c9f web: revert using PUBLIC_URL for BOSH URL
This partially reverts
5e6faced4f

It was unnecessary, and created lot of trouble.
2020-04-14 11:17:05 +02:00
Saúl Ibarra Corretgé
5e6faced4f web: use PUBLIC_URL for etherpaad base and BOSH URLs 2020-03-28 15:40:25 +01:00
Saúl Ibarra Corretgé
655cf6be4a web,prosody,jvb: prepare for new stable release 2020-03-27 22:12:25 +01:00
Frank Sachsenheim
cd4a071ed4
web: check for certbot's success and exit in case of a failure 2020-03-24 22:45:55 +01:00
Timon Engelke
8fa9f942ac
web: update nginx config from upstream 2020-03-24 09:02:48 +01:00
Paul Tiedtke
986071b100 jigasi: add missing transcription volumes to dockerfile 2020-02-21 17:24:22 +01:00
Matthias Herzog
9b17c0548d web: fix letsencrypt renewal 2020-01-08 15:58:51 +00:00
netaskd
ffa017b74d jibri: add jibri service 2019-12-04 14:53:59 +01:00
netaskd
8352559f50 misc: add ARG JITSI_REPO for dependented dockerfiles 2019-09-03 19:07:55 +02:00
netaskd
2b30ab9a23 misc: add variable JITSI_REPO instead hardcoded jitsi 2019-09-03 17:14:50 +02:00
Saúl Ibarra Corretgé
edf9630950 web: update config files 2019-08-22 12:34:14 +02:00
netaskd
e48bf46f7c jigasi,web: add transcription options 2019-08-07 23:02:30 +02:00
netaskd
62f2d11cab web,etherpad: add etherpad addon for sharing document 2019-08-07 22:48:47 +02:00
Matthias Herzog
e6eecce2af web: add letsencrypt volume 2019-07-08 20:32:40 +02:00
Saúl Ibarra Corretgé
7f00c8e7a2 web: sync Jitsi Meet configuration 2019-02-13 10:50:17 +01:00
netaskd
bb7f68a749 web: update config.js from upstream 2019-02-12 10:04:12 +01:00
Saúl Ibarra Corretgé
30c425811e misc: fix handling boolean values
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/30
2019-01-28 23:11:03 +01:00
netaskd
072fb9d9d1 web: add strong ssl_ciphers and headers 2018-12-10 08:43:01 +01:00
netaskd
7c6c6bcefb web: enable ssl_protocol TLSv1.2 only 2018-12-04 19:56:09 +01:00
Paul Tiedtke
ab5f248913 web: run cron only when HTTPS and Let's Encrypt are enabled 2018-12-03 10:06:36 +01:00
Saúl Ibarra Corretgé
d6de4fdb58 web: fix typo 2018-11-07 15:34:42 +01:00
Saúl Ibarra Corretgé
cda11bc52f web: add ability to redirect HTTP traffic to HTTPS
Useful if you're running this setup directly on the Internet, with a
Let's Encrypt certificate.
2018-11-07 14:27:22 +01:00
Saúl Ibarra Corretgé
fcf83859e4 web: add ability to disable HTTPS
If TLS is terminated elsewhere and then connections are proxied over
HTTP, there is no need for it and it makes initialization a tad slower
on the first run.
2018-11-07 14:15:09 +01:00
Saúl Ibarra Corretgé
5c988de8b6 web: refactor nginx configuration 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé
f61ef3f093 web: add builtin Let's Encrypt support 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé
ca47165807 web: move key generation to the main config script 2018-11-07 10:08:09 +01:00
Saúl Ibarra Corretgé
415f10406f web: split TLS configuration and make it stronger
Resources:

- https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- https://weakdh.org/sysadmin.html
2018-11-07 10:08:09 +01:00
Saúl Ibarra Corretgé
c34b4814df web: fix formatting 2018-11-07 09:35:23 +01:00
Saúl Ibarra Corretgé
ee90a92d43 xmpp: add support for authentication 2018-10-18 12:08:30 +02:00
Saúl Ibarra Corretgé
c475d537e6 web: update config.js and interface_config.js 2018-10-03 07:40:14 +02:00
Saúl Ibarra Corretgé
0bc1a8b49c web: enable external API 2018-08-17 10:54:17 +02:00
Saúl Ibarra Corretgé
1010c71b33 core: rework templating
Use frep [0] which uses the Go templating capabilities.

[0]: https://github.com/subchen/frep
2018-08-09 21:43:54 +02:00
Saúl Ibarra Corretgé
9adeab8039 web: update config.js and interface_config.js 2018-07-17 10:39:54 +02:00
Saúl Ibarra Corretgé
50863f3ea2 web: add ability to customize interface_config.js 2018-05-04 08:29:46 +02:00
Saúl Ibarra Corretgé
822cca7d39 xmpp: add ability to customize the XMPP MUC domain 2018-04-28 17:42:37 +02:00
Saúl Ibarra Corretgé
0e43efa17e build: add ability to force rebuilds and select releases 2018-04-27 09:55:14 +02:00
Saúl Ibarra Corretgé
84332c9527 xmpp: add ability to customize the jicofo auth user 2018-04-26 08:38:59 +02:00
Saúl Ibarra Corretgé
c6cc67b68d Use an unaltered config.js file
Make all the necessary changes outside, setting the bosh URL
in this case.
2018-03-14 11:37:09 +01:00
Saúl Ibarra Corretgé
467a149cbb Initial import 2018-03-14 10:23:50 +01:00