9 Commits

Author	SHA1	Message	Date
Slavi Pantaleev	4880dcceb0	Fix OCSP-stapling-related errors due to missing resolver ... Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1057	2021-05-28 11:14:33 +03:00
sakkiii	25e67b51d1	Merge branch 'spantaleev:master' into master	2021-05-25 11:40:56 +05:30
sakkiii	3436f9c10a	rename to matrix_nginx_proxy_hsts_preload_enabled	2021-05-25 00:56:59 +05:30
sakkiii	df2d91970d	matrix_nginx_proxy_xss_protection	2021-05-24 17:02:47 +05:30
sakkiii	e9b878b9e9	Optimize SSL session	2021-05-18 19:39:43 +05:30
sakkiii	d31b55b2a7	SSL-enabled block only	2021-05-18 03:24:06 +05:30
sakkiii	c05021640d	Enable OCSP Stapling	2021-05-15 15:57:05 +05:30
Slavi Pantaleev	e00ef04b57	Add opt-out-of-FLoC headers by default	2021-04-21 13:58:24 +03:00
Slavi Pantaleev	4d62a75f6f	Get matrix-corporal to play nicely with a Synapse worker setup ... We do this by creating one more layer of indirection. First we reach some generic vhost handling matrix.DOMAIN. A bunch of override rules are added there (capturing traffic to send to ma1sd, etc). nginx-status and similar generic things also live there. We then proxy to the homeserver on some other vhost (only Synapse being available right now, but repointing this to Dendrite or other will be possible in the future). Then that homeserver-specific vhost does its thing to proxy to the homeserver. It may or may not use workers, etc. Without matrix-corporal, the flow is now: 1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf) 2. matrix-nginx-proxy/matrix-synapse.conf 3. matrix-synapse With matrix-corporal enabled, it becomes: 1. matrix.DOMAIN (matrix-nginx-proxy/matrix-domain.conf) 2. matrix-corporal 3. matrix-nginx-proxy/matrix-synapse.conf 4. matrix-synapse (matrix-corporal gets injected at step 2).	2021-01-25 09:46:41 +02:00