kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-10-10 10:48:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

Nextcloud/Talk: add Janus config & fix WebSocket proxying

Browse Source 
Nginx: define 'map $http_upgrade $connection_upgrade' once in http{} and reuse; drop duplicate map from ws_generic vhost; tidy ws location headers/spacing. Nextcloud: add WS location for standalone signaling; render & mount Janus config (NAT 1:1, ICE enforce/ignore lists, libnice hardening); extend CSP (connect-src/frame-src for cloud & collabora, worker-src blob:); disable keeporsweep app; replace nginx reload handler with compose up; add NEXTCLOUD_HOST_JANUS_CONF_PATH and related vars.

Context: https://chatgpt.com/share/68db9f41-16ec-800f-9cdf-7530862f89aa
This commit is contained in:
Kevin Veen-Birkenbach
2025-09-30 11:14:15 +02:00
parent 2439beb95a
commit 26a1992d84
3 changed files with 16 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
roles/sys-svc-proxy/templates/vhost/ws_generic.conf.j2
View File

@@ -1,8 +1,3 @@
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
server { server {
server_name {{ domain }}; server_name {{ domain }};

9
roles/sys-svc-webserver-core/templates/nginx.conf.j2
View File

@@ -7,6 +7,15 @@ events
http http
{ {
{#
Map the client's Upgrade header to the proper Connection value for WebSocket proxying:
use "upgrade" when an Upgrade is requested, otherwise "close". Define once in http{} and use $connection_upgrade.
#}
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
include mime.types; include mime.types;
{# default_type application/octet-stream; If html filter does not work, this one needs to be used#} {# default_type application/octet-stream; If html filter does not work, this one needs to be used#}