free
/
freedombone
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Make jitsi nginx config similar to the default

This commit is contained in:
Bob Mottram 2016-11-10 12:44:21 +00:00
parent 306008a49e
commit 6d5a72f7b5
1 changed files with 61 additions and 63 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

124
src/freedombone-app-jitsi
View File

@ -251,55 +251,54 @@ function install_jitsi {
apt-get -yq install jitsi-meet jitsi-meet-prosody apt-get -yq install jitsi-meet jitsi-meet-prosody
jitsi_nginx_site=/etc/nginx/sites-available/${JITSI_DOMAIN_NAME}.conf jitsi_nginx_site=/etc/nginx/sites-available/${JITSI_DOMAIN_NAME}.conf
if [ -f $jitsi_nginx_site ]; then
rm $jitsi_nginx_site
fi
if [[ $ONION_ONLY == "no" ]]; then if [[ $ONION_ONLY == "no" ]]; then
function_check nginx_http_redirect echo 'server_names_hash_bucket_size 64;' > $jitsi_nginx_site
nginx_http_redirect ${JITSI_DOMAIN_NAME}.conf
echo '' >> $jitsi_nginx_site
echo 'server_names_hash_bucket_size 64;' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo 'server {' >> $jitsi_nginx_site echo 'server {' >> $jitsi_nginx_site
echo ' listen 443 ssl;' >> $jitsi_nginx_site echo ' listen 80;' >> $jitsi_nginx_site
echo " server_name ${JITSI_DOMAIN_NAME};" >> $jitsi_nginx_site echo " server_name ${JITSI_DOMAIN_NAME};" >> $jitsi_nginx_site
echo ' return 301 https://$host$request_uri;' >> $jitsi_nginx_site
echo '}' >> $jitsi_nginx_site
echo 'server {' >> $jitsi_nginx_site
echo ' listen 443 ssl;' >> $jitsi_nginx_site
echo " server_name ${JITSI_DOMAIN_NAME};" >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' # Security' >> $jitsi_nginx_site echo ' ssl_protocols TLSv1 TLSv1.1 TLSv1.2;' >> $jitsi_nginx_site
function_check nginx_ssl echo ' ssl_prefer_server_ciphers on;' >> $jitsi_nginx_site
nginx_ssl ${JITSI_DOMAIN_NAME}.conf echo ' ssl_ciphers "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA256:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EDH+aRSA+AESGCM:EDH+aRSA+SHA256:EDH+aRSA:EECDH:!aNULL:!eNULL:!MEDIUM:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!SEED";' >> $jitsi_nginx_site
function_check nginx_disable_sniffing
nginx_disable_sniffing ${JITSI_DOMAIN_NAME}.conf
echo ' add_header Strict-Transport-Security max-age=15768000;' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' # Logs' >> $jitsi_nginx_site echo ' add_header Strict-Transport-Security "max-age=31536000";' >> $jitsi_nginx_site
echo ' access_log off;' >> $jitsi_nginx_site
echo ' error_log off;' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' # Root' >> $jitsi_nginx_site echo " ssl_certificate /etc/ssl/certs/${JITSI_DOMAIN_NAME}.crt;" >> $jitsi_nginx_site
echo " root /usr/share/jitsi-meet;" >> $jitsi_nginx_site echo " ssl_certificate_key /etc/ssl/private/${JITSI_DOMAIN_NAME}.key;" >> $jitsi_nginx_site
echo " ssl_dhparam /etc/ssl/certs/${JITSI_DOMAIN_NAME}.dhparam;" >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' index index.html index.htm;' >> $jitsi_nginx_site echo ' root /usr/share/jitsi-meet;' >> $jitsi_nginx_site
echo ' index index.html index.htm;' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' location /config.js {' >> $jitsi_nginx_site echo ' location /config.js {' >> $jitsi_nginx_site
echo " alias /etc/jitsi/meet/${JITSI_DOMAIN_NAME}-config.js;" >> $jitsi_nginx_site echo ' alias /etc/jitsi/meet/jitsi.freedombone.net-config.js;' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site echo ' }' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' location ~ ^/([a-zA-Z0-9=\?]+)$ {' >> $jitsi_nginx_site echo ' location ~ ^/([a-zA-Z0-9=\?]+)$ {' >> $jitsi_nginx_site
echo ' rewrite ^/(.*)$ / break;' >> $jitsi_nginx_site echo ' rewrite ^/(.*)$ / break;' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site echo ' }' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' location / {' >> $jitsi_nginx_site echo ' location / {' >> $jitsi_nginx_site
function_check nginx_limits echo ' ssi on;' >> $jitsi_nginx_site
nginx_limits ${JITSI_DOMAIN_NAME}.conf '15m' echo ' }' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' location /http-bind {' >> $jitsi_nginx_site echo ' # Backward compatibility' >> $jitsi_nginx_site
echo " proxy_pass http://localhost:${JITSI_PORT}/http-bind;" >> $jitsi_nginx_site echo ' location ~ /external_api.* {' >> $jitsi_nginx_site
echo ' proxy_set_header X-Forwarded-For $remote_addr;' >> $jitsi_nginx_site echo ' root /usr/share/jitsi-meet/libs;' >> $jitsi_nginx_site
echo ' proxy_set_header Host $http_host;' >> $jitsi_nginx_site echo ' }' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' # BOSH' >> $jitsi_nginx_site
echo ' location /http-bind {' >> $jitsi_nginx_site
echo ' proxy_pass http://localhost:5280/http-bind;' >> $jitsi_nginx_site
echo ' proxy_set_header X-Forwarded-For $remote_addr;' >> $jitsi_nginx_site
echo ' proxy_set_header Host $http_host;' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site
echo '}' >> $jitsi_nginx_site echo '}' >> $jitsi_nginx_site
else else
echo -n '' > $jitsi_nginx_site echo -n '' > $jitsi_nginx_site
@ -312,38 +311,37 @@ function install_jitsi {
echo " server_name ${JITSI_ONION_HOSTNAME};" >> $jitsi_nginx_site echo " server_name ${JITSI_ONION_HOSTNAME};" >> $jitsi_nginx_site
fi fi
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
function_check nginx_disable_sniffing echo ' root /usr/share/jitsi-meet;' >> $jitsi_nginx_site
nginx_disable_sniffing ${JITSI_DOMAIN_NAME}.conf echo ' index index.html index.htm;' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' # Logs' >> $jitsi_nginx_site echo ' location /config.js {' >> $jitsi_nginx_site
echo ' access_log off;' >> $jitsi_nginx_site echo ' alias /etc/jitsi/meet/jitsi.freedombone.net-config.js;' >> $jitsi_nginx_site
echo ' error_log off;' >> $jitsi_nginx_site echo ' }' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' # Root' >> $jitsi_nginx_site echo ' location ~ ^/([a-zA-Z0-9=\?]+)$ {' >> $jitsi_nginx_site
echo " root /usr/share/jitsi-meet;" >> $jitsi_nginx_site echo ' rewrite ^/(.*)$ / break;' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' index index.html index.htm;' >> $jitsi_nginx_site echo ' location / {' >> $jitsi_nginx_site
echo ' ssi off;' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' location /config.js {' >> $jitsi_nginx_site echo ' # Backward compatibility' >> $jitsi_nginx_site
echo " alias /etc/jitsi/meet/${JITSI_DOMAIN_NAME}-config.js;" >> $jitsi_nginx_site echo ' location ~ /external_api.* {' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site echo ' root /usr/share/jitsi-meet/libs;' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo '' >> $jitsi_nginx_site
echo ' location ~ ^/([a-zA-Z0-9=\?]+)$ {' >> $jitsi_nginx_site echo ' # BOSH' >> $jitsi_nginx_site
echo ' rewrite ^/(.*)$ / break;' >> $jitsi_nginx_site echo ' location /http-bind {' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site echo ' proxy_pass http://localhost:5280/http-bind;' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site echo ' proxy_set_header X-Forwarded-For $remote_addr;' >> $jitsi_nginx_site
echo ' location / {' >> $jitsi_nginx_site echo ' proxy_set_header Host $http_host;' >> $jitsi_nginx_site
function_check nginx_limits echo ' }' >> $jitsi_nginx_site
nginx_limits ${JITSI_DOMAIN_NAME}.conf '15m'
echo ' }' >> $jitsi_nginx_site
echo '' >> $jitsi_nginx_site
echo ' location /http-bind {' >> $jitsi_nginx_site
echo " proxy_pass http://localhost:${JITSI_PORT}/http-bind;" >> $jitsi_nginx_site
echo ' proxy_set_header X-Forwarded-For $remote_addr;' >> $jitsi_nginx_site
echo ' proxy_set_header Host $http_host;' >> $jitsi_nginx_site
echo ' }' >> $jitsi_nginx_site
echo '}' >> $jitsi_nginx_site echo '}' >> $jitsi_nginx_site
sed -i "s|server_name ${JITSI_DOMAIN_NAME}.conf|server_name ${JITSI_DOMAIN_NAME}|g" $jitsi_nginx_site
sed -i "s|/var/www/${JITSI_DOMAIN_NAME}.conf/htdocs|/usr/share/jitsi-meet|g" $jitsi_nginx_site
if [ ! -f /etc/ssl/certs/${JITSI_DOMAIN_NAME}.pem ]; then if [ ! -f /etc/ssl/certs/${JITSI_DOMAIN_NAME}.pem ]; then
function_check create_site_certificate function_check create_site_certificate
create_site_certificate ${JITSI_DOMAIN_NAME} 'yes' create_site_certificate ${JITSI_DOMAIN_NAME} 'yes'