2a35ad5a0a
* update http2 config due to deprecation the previous way to let `http2` follow a `listen` was depracated, it moved to `http2 on;` * enable quic and http3 I hope the comments are somewhat understandable. if someone can describe the `reuseport` part more concise, please do. |
||
|---|---|---|
| .. | ||
| matrix.conf | ||
| README.md | ||
Nginx reverse-proxy fronting the playbook's integrated Traefik reverse-proxy
This directory contains a sample config that shows you how to use the nginx webserver to front the integrated Traefik reverse-proxy webserver with another reverse-proxy.
Prerequisite configuration
To get started, first follow the front the integrated reverse-proxy webserver with another reverse-proxy instructions and update your playbook's configuration (inventory/host_vars/matrix.<your-domain>/vars.yml).
Using the nginx configuration
Copy the matrix.conf file to your nginx server's filesystem, modify it to your needs and include it in your nginx configuration (e.g. include /path/to/matrix.conf;).
This configuration disables SSL certificate retrieval, so you will need to obtain SSL certificates manually (e.g. by using certbot) and set the appropriate path in matrix.conf. In the example nginx configuration, a single certificate is used for all subdomains (matrix.DOMAIN, element.DOMAIN, etc.). For your setup, may wish to change this and use separate server blocks and separate certificate files for each host.
Also note that your copy of the matrix.conf file has to be adapted to whatever services you are using. For example, remove element.domain.com from the server_name list if you don't use Element web client or add dimension.domain.com to it if you do use the Dimension integration manager.