2016-11-30 05:11:15 +00:00
|
|
|
|
|
|
|
<VirtualHost *:80>
|
|
|
|
ServerName jitsi-meet.example.com
|
|
|
|
Redirect permanent / https://jitsi-meet.example.com/
|
|
|
|
</VirtualHost>
|
|
|
|
|
|
|
|
<VirtualHost *:443>
|
2021-01-04 14:22:40 +00:00
|
|
|
ServerName jitsi-meet.example.com
|
2016-11-30 05:11:15 +00:00
|
|
|
|
2021-01-04 14:22:40 +00:00
|
|
|
# enable HTTP/2, if available
|
|
|
|
Protocols h2 http/1.1
|
2020-05-20 16:56:05 +00:00
|
|
|
|
2021-01-04 14:22:40 +00:00
|
|
|
SSLEngine on
|
|
|
|
SSLProxyEngine on
|
|
|
|
SSLCertificateFile /etc/jitsi/meet/jitsi-meet.example.com.crt
|
|
|
|
SSLCertificateKeyFile /etc/jitsi/meet/jitsi-meet.example.com.key
|
2020-05-20 16:56:05 +00:00
|
|
|
|
2021-01-04 14:22:40 +00:00
|
|
|
Header always set Strict-Transport-Security "max-age=63072000"
|
2016-11-30 05:11:15 +00:00
|
|
|
|
2021-01-04 14:22:40 +00:00
|
|
|
DocumentRoot "/usr/share/jitsi-meet"
|
|
|
|
<Directory "/usr/share/jitsi-meet">
|
|
|
|
Options Indexes MultiViews Includes FollowSymLinks
|
|
|
|
AddOutputFilter Includes html
|
|
|
|
AllowOverride All
|
|
|
|
Order allow,deny
|
|
|
|
Allow from all
|
|
|
|
</Directory>
|
2016-11-30 05:11:15 +00:00
|
|
|
|
2021-01-04 14:22:40 +00:00
|
|
|
ErrorDocument 404 /static/404.html
|
2017-03-20 21:05:11 +00:00
|
|
|
|
2021-01-04 14:22:40 +00:00
|
|
|
Alias "/config.js" "/etc/jitsi/meet/jitsi-meet.example.com-config.js"
|
|
|
|
<Location /config.js>
|
|
|
|
Require all granted
|
|
|
|
</Location>
|
2016-11-30 05:11:15 +00:00
|
|
|
|
2021-01-04 14:22:40 +00:00
|
|
|
Alias "/external_api.js" "/usr/share/jitsi-meet/libs/external_api.min.js"
|
|
|
|
<Location /external_api.js>
|
|
|
|
Require all granted
|
|
|
|
</Location>
|
2019-04-23 16:36:33 +00:00
|
|
|
|
2021-01-04 14:22:40 +00:00
|
|
|
ProxyPreserveHost on
|
2021-02-20 12:33:53 +00:00
|
|
|
ProxyPass /http-bind http://localhost:5280/http-bind
|
|
|
|
ProxyPassReverse /http-bind http://localhost:5280/http-bind
|
2021-02-05 23:32:19 +00:00
|
|
|
ProxyPass /xmpp-websocket ws://localhost:5280/xmpp-websocket
|
|
|
|
ProxyPassReverse /xmpp-websocket ws://localhost:5280/xmpp-websocket
|
2021-02-20 12:33:53 +00:00
|
|
|
ProxyPass /colibri-ws/default-id ws://localhost:9090/colibri-ws/default-id
|
|
|
|
ProxyPassReverse /colibri-ws/default-id ws://localhost:9090/colibri-ws/default-id
|
2016-11-30 05:11:15 +00:00
|
|
|
|
2021-01-04 14:22:40 +00:00
|
|
|
RewriteEngine on
|
|
|
|
RewriteRule ^/([a-zA-Z0-9]+)$ /index.html
|
2016-11-30 05:11:15 +00:00
|
|
|
</VirtualHost>
|
2020-05-20 16:56:05 +00:00
|
|
|
|
|
|
|
# Mozilla Guideline v5.4, Apache 2.4.41, OpenSSL 1.1.1d, intermediate configuration, no OCSP
|
2021-01-04 14:22:40 +00:00
|
|
|
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
|
|
|
|
SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
|
|
|
|
SSLHonorCipherOrder off
|
|
|
|
SSLSessionTickets off
|