diff options
Diffstat (limited to 'installation')
| -rw-r--r-- | installation/Caddyfile | 5 | ||||
| -rw-r--r-- | installation/pleroma-apache.conf | 26 | ||||
| -rw-r--r-- | installation/pleroma.nginx | 42 |
3 files changed, 61 insertions, 12 deletions
diff --git a/installation/Caddyfile b/installation/Caddyfile deleted file mode 100644 index 08d5e6169..000000000 --- a/installation/Caddyfile +++ /dev/null @@ -1,5 +0,0 @@ -instance.example.com { # Your instance's domain - proxy / localhost:4000 { - websocket - } -} diff --git a/installation/pleroma-apache.conf b/installation/pleroma-apache.conf new file mode 100644 index 000000000..bb6d32587 --- /dev/null +++ b/installation/pleroma-apache.conf @@ -0,0 +1,26 @@ +<VirtualHost *:80> + #Example configuration for when Apache httpd and Pleroma are on the same host. + #Needed modules: proxy proxy_http proxy_wstunnel rewrite + #This assumes a Debian style Apache config. Put this in /etc/apache2/sites-available + #Doesn't include SSL, just run certbot and let it take care of that. + + + #Change this: + ServerName pleroma.example.com + + RewriteEngine On + RewriteCond %{HTTP:Connection} Upgrade [NC] + RewriteCond %{HTTP:Upgrade} websocket [NC] + RewriteRule /(.*) ws://localhost:4000/$1 [P,L] + + ProxyRequests off + ProxyPass / http://localhost:4000/ + ProxyPassReverse / http://localhost:4000/ + + #Change this too: + RequestHeader set Host "pleroma.example.com" + ProxyPreserveHost On + + ErrorLog ${APACHE_LOG_DIR}/error.log + CustomLog ${APACHE_LOG_DIR}/access.log combined +</VirtualHost> diff --git a/installation/pleroma.nginx b/installation/pleroma.nginx index fcc3997d3..61e40c508 100644 --- a/installation/pleroma.nginx +++ b/installation/pleroma.nginx @@ -1,18 +1,26 @@ +# default nginx site config for Pleroma +# +# Simple installation instructions: +# 1. Install your TLS certificate, possibly using Let's Encrypt. +# 2. Replace 'example.tld' with your instance's domain wherever it appears. +# 3. Copy this file to /etc/nginx/sites-available/ and then add a symlink to it +# in /etc/nginx/sites-enabled/ and restart nginx. + proxy_cache_path /tmp/pleroma-media-cache levels=1:2 keys_zone=pleroma_media_cache:10m max_size=10g inactive=720m use_temp_path=off; server { - listen 80; - server_name example.tld; - return 301 https://$server_name$request_uri; + listen 80; + server_name example.tld; + return 301 https://$server_name$request_uri; } server { - listen 443; + listen 443 ssl http2; ssl on; ssl_session_timeout 5m; - ssl_certificate /etc/letsencrypt/live/exmaple.tld/fullchain.pem; + ssl_certificate /etc/letsencrypt/live/example.tld/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/example.tld/privkey.pem; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; @@ -21,14 +29,35 @@ server { server_name example.tld; + gzip_vary on; + gzip_proxied any; + gzip_comp_level 6; + gzip_buffers 16 8k; + gzip_http_version 1.1; + gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript application/activity+json application/atom+xml; + + # the nginx default is 1m, not enough for large media uploads + client_max_body_size 16m; + location / { - add_header 'Access-Control-Allow-Origin' '*'; + # if you do not want remote frontends to be able to access your Pleroma backend + # server, remove these lines. + add_header 'Access-Control-Allow-Origin' '*' always; + add_header 'Access-Control-Allow-Methods' 'POST, GET, OPTIONS' always; + add_header 'Access-Control-Allow-Headers' 'Authorization, Content-Type' always; + if ($request_method = OPTIONS) { + return 204; + } + # stop removing lines here. + proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $http_host; proxy_pass http://localhost:4000; + + client_max_body_size 16m; } location /proxy { @@ -36,5 +65,4 @@ server { proxy_cache_lock on; proxy_pass http://localhost:4000; } - } |