aboutsummaryrefslogtreecommitdiff
path: root/files/usr/local/etc/nginx
diff options
context:
space:
mode:
authorCullum Smith <cullum@sacredheartsc.com>2025-03-25 21:24:12 -0400
committerCullum Smith <cullum@sacredheartsc.com>2025-03-25 21:24:12 -0400
commitd58dac1bb32b87e79e16a2e9777a6dced701aa3b (patch)
treef273075417e09566ec6d7a63d1627429909295a1 /files/usr/local/etc/nginx
parent9ffc950b5296374f387bfc689806d7af717bb78a (diff)
downloadinfrastructure-d58dac1bb32b87e79e16a2e9777a6dced701aa3b.tar.gz
add mollysocket support to xmpp server
Diffstat (limited to 'files/usr/local/etc/nginx')
-rw-r--r--files/usr/local/etc/nginx/vhosts.conf.xmpp_server23
1 files changed, 23 insertions, 0 deletions
diff --git a/files/usr/local/etc/nginx/vhosts.conf.xmpp_server b/files/usr/local/etc/nginx/vhosts.conf.xmpp_server
index fad92ad..7cbe5a2 100644
--- a/files/usr/local/etc/nginx/vhosts.conf.xmpp_server
+++ b/files/usr/local/etc/nginx/vhosts.conf.xmpp_server
@@ -21,3 +21,26 @@ server {
proxy_pass http://127.0.0.1:${prosody_http_port};
}
}
+
+server {
+ listen ${mollysocket_port} ssl default_server;
+ listen [::]:${mollysocket_port} ssl default_server;
+
+ http2 on;
+
+ ssl_certificate ${prosody_https_cert};
+ ssl_certificate_key ${prosody_https_key};
+ ssl_trusted_certificate ${prosody_https_cacert};
+
+ add_header Strict-Transport-Security "max-age=63072000" always;
+
+ location / {
+ proxy_http_version 1.1;
+ proxy_set_header Host \$host:\$server_port;
+ proxy_set_header X-Real-IP \$remote_addr;
+ proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+ proxy_set_header X-Forwarded-Proto \$scheme;
+ proxy_set_header X-Original-URL \$uri;
+ proxy_pass http://127.0.0.1:${mollysocket_local_port};
+ }
+}