From 097030c84699396c6915af3a7143ec35be0809b6 Mon Sep 17 00:00:00 2001
From: Robert Scheck <robert@fedoraproject.org>
Date: Thu, 26 Aug 2021 19:46:00 +0200
Subject: [PATCH] openvidu-proxy: Pick up environment settings for TLS version,
 ciphers and HSTS

TLS version, ciphers and HSTS have been made configurable with #560, but these
settings are currently not getting picked up from environment variables...
---
 .../deployments/ce/docker-compose/docker-compose.yml           | 3 +++
 .../pro/docker-compose/openvidu-server-pro/docker-compose.yml  | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/openvidu-server/deployments/ce/docker-compose/docker-compose.yml b/openvidu-server/deployments/ce/docker-compose/docker-compose.yml
index ae27c2ea..2a2f3ee5 100644
--- a/openvidu-server/deployments/ce/docker-compose/docker-compose.yml
+++ b/openvidu-server/deployments/ce/docker-compose/docker-compose.yml
@@ -110,6 +110,9 @@ services:
             - LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL}
             - PROXY_HTTP_PORT=${HTTP_PORT:-}
             - PROXY_HTTPS_PORT=${HTTPS_PORT:-}
+            - PROXY_HTTPS_PROTOCOLS=${HTTPS_PROTOCOLS:-}
+            - PROXY_HTTPS_CIPHERS=${HTTPS_CIPHERS:-}
+            - PROXY_HTTPS_HSTS=${HTTPS_HSTS:-}
             - ALLOWED_ACCESS_TO_DASHBOARD=${ALLOWED_ACCESS_TO_DASHBOARD:-}
             - ALLOWED_ACCESS_TO_RESTAPI=${ALLOWED_ACCESS_TO_RESTAPI:-}
             - PROXY_MODE=CE
diff --git a/openvidu-server/deployments/pro/docker-compose/openvidu-server-pro/docker-compose.yml b/openvidu-server/deployments/pro/docker-compose/openvidu-server-pro/docker-compose.yml
index ec3bb2f2..86e76afb 100644
--- a/openvidu-server/deployments/pro/docker-compose/openvidu-server-pro/docker-compose.yml
+++ b/openvidu-server/deployments/pro/docker-compose/openvidu-server-pro/docker-compose.yml
@@ -100,6 +100,9 @@ services:
             - LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL}
             - PROXY_HTTP_PORT=${HTTP_PORT:-}
             - PROXY_HTTPS_PORT=${HTTPS_PORT:-}
+            - PROXY_HTTPS_PROTOCOLS=${HTTPS_PROTOCOLS:-}
+            - PROXY_HTTPS_CIPHERS=${HTTPS_CIPHERS:-}
+            - PROXY_HTTPS_HSTS=${HTTPS_HSTS:-}
             - ALLOWED_ACCESS_TO_DASHBOARD=${ALLOWED_ACCESS_TO_DASHBOARD:-}
             - ALLOWED_ACCESS_TO_RESTAPI=${ALLOWED_ACCESS_TO_RESTAPI:-}
             - PROXY_MODE=PRO