docker-synapse.minervajuppiter.net

commit fd33d07d9736d86e2bd333c90a74fc6c667670bb
parent 95c44ff878ad95fbd9b3f1d48f3c6da0066ef86c
Author: Minerva_juppiter <94231606+minerva-jupiter@users.noreply.github.com>
Date:   Mon,  9 Feb 2026 18:10:50 +0900

Update Nginx configuration for SSL and redirection
Diffstat:
M
nginx.conf
 | 
27
+++++++++++++--------------

1 file changed, 13 insertions(+), 14 deletions(-)
diff --git a/nginx.conf b/nginx.conf
@@ -1,21 +1,20 @@
 server {
-    listen 28009;
-
-    # For the federation port
-    #listen 8448 ssl http2 default_server;
-    #listen [::]:8448 ssl http2 default_server;
+    listen 80;
+    server_name docker-synapse.minervajuppiter.net;
+    return 301 https://$host$request_uri;
+}
 
+server {
+    listen 443 ssl;
     server_name docker-synapse.minervajuppiter.net;
 
-    location / {
-        proxy_pass http://synapse:28008;
-        proxy_set_header X-Forwarded-For $remote_addr;
-        proxy_set_header X-Forwarded-Proto $scheme;
+    ssl_certificate /etc/letsencrypt/live/docker-synapse.minervajuppiter.net/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/docker-synapse.minervajuppiter.net/privkey.pem;
+
+    location /_matrix/ {
+        proxy_pass http://tuwunel:6167;
         proxy_set_header Host $host;
-        client_max_body_size 50M;
-        proxy_hide_header 'Access-Control-Allow-Origin';
-        add_header 'Access-Control-Allow-Origin' 'https://synapse-admin-api.pages.dev';
-        add_header 'Access-Control-Allow-Credentials' 'true';
-        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_read_timeout 600s;
     }
 }