ambiser
/
openvidu
mirror of https://github.com/OpenVidu/openvidu.git
8
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,739 Commits
7 Branches
58 Tags
206 MiB
Commit Graph

34 Commits (e15b6115c8e706a3b999b5973b6cdebf2023b024)

Author SHA1 Message Date
cruizba b93b8dd85e deployment: Nginx security improvements: 
- Disable TLSv1.0 and TLSv1.1 by default.
- Use intermediate SSL ciphers following mozilla SSL generator: https://ssl-config.mozilla.org/#server=nginx&version=1.23.1&config=intermediate&openssl=1.1.1&guideline=5.6
- Enable HSTS by default
 2022-11-10 14:43:03 +01:00
cruizba ca08e16ac4 deployment: Deprecate old API by default. 2022-09-14 12:04:57 +02:00
cruizba edfbe3104e deployment: fix nginx main process. Update nginx version 2021-12-16 17:27:32 +01:00
cruizba 110878f4c9 deployment: Add volume to configure custom locations in nginx. This is useful to add reverse proxy or other services to the nginx configuration to default HTTPS_PORT configured 2021-09-30 16:33:08 +02:00
cruizba f1bb937c60 deployment: Add rule to allow iframe 2021-06-07 10:58:42 +02:00
cruizba d8beb2147d openvidu-deployment: Parametrize and increased default 'client_max_body_size' to 200M in openvidu-ce and openvidu-pro nginx 2021-02-04 20:57:01 +01:00
Flamenco 018145c90a
Fix typo in output message 2020-12-29 10:19:40 -05:00
cruizba 6f4b701094 openvidu-deployment: Typo delete https listen directive 2020-11-25 12:34:31 +01:00
cruizba 87b5b6ed88 openvidu-deployment: Fix Special characters on delete nginx listen directive 2020-11-25 12:33:35 +01:00
cruizba 9cfd38e892 openvidu-deployment: Support machines with dual stack IPv4/IPv6 in nginx 2020-11-25 12:07:33 +01:00
Carlos Ruiz Ballesteros 56cbef5cc7
Merge pull request #560 from robert-scheck/tls-hardening 
openvidu-proxy: Make TLS version, ciphers and HSTS configurable
 2020-11-23 21:36:13 +01:00
Robert Scheck fc92eb7cb4 openvidu-proxy: Make TLS version, ciphers and HSTS configurable 
Allow flexible HTTPS security hardening using run-time configuration,
rather just build-time container/volume layering.
 2020-11-18 22:07:28 +01:00
Robert Scheck 3d0ab7c92e IPv6 listening (RFC 6540) 
Ensure that Nginx listens also additionally on the IPv6 socket if the
operating system inside the container provides IPv6 support. And as per
RFC 6540, IP nowadays means IPv4 and IPv6, not just IPv4-only.
 2020-11-18 19:36:20 +01:00
cruizba 43c5c4b4a5 openvidu-deployment: Print if nginx is using deprecated API 2020-11-09 18:04:41 +01:00
cruizba 0c38d4d9b8 Custom volume to customize nginx 2020-11-09 16:29:35 +01:00
cruizba d499940495 openvidu-deployment: custom config nginx 2020-11-09 15:33:06 +01:00
cruizba d61c6b89c7 Revert nginx 2020-11-09 15:20:04 +01:00
cruizba 39be78b4e5 openvidu-deployment: Some minor fixes nginx and update versions docker-compose 2020-11-09 14:18:40 +01:00
cruizba 6a73083e7b openvidu-deployment: General updates in nginx and public ip discovering: 
- Add option to redirect www to non-www (REDIRECT_WWW).
- Add endpoint to check nginx workers.
- Custom virtual hosts (Server blocks) can be added by the user to create custom rules in `/opt/openvidu/custom-nginx-vhost`.
- Parametrize `worker_connections` in nginx.conf (WORKER_CONNECTIONS)
- Improve `discover_my_public_ip.sh` to use dns servers instead of http servers
- Posibility to autodiscover ipv6 if available by using `PUBLIC_IP=auto-ipv6` in nginx, `TURN_PUBLIC_IP=auto-ipv6` in coturn and `COTURN_IP=auto-ipv6` in openvidu-server.
By default ipv4 is used.
 2020-11-02 19:46:59 +01:00
cruizba 44bb958da3 deployment: nginx refactor 2020-11-01 21:03:12 +01:00
cruizba f73bafdd7a Safely remove certificates folder 2020-10-15 13:35:15 +02:00
cruizba bf6defc4de deployment-openvidu-ce-and-pro: Fix nginx error on changing certificate types 2020-10-15 02:23:43 +02:00
cruizba 4eded98ad9 deployment-openvidu-ce: Update nginx to new API rules and use deprecated APIs. 2020-10-14 14:34:21 +02:00
OscarSotoSanchez 3b5668d828 Proxy updated for auto renew letscrypt certificated 2020-06-29 16:37:26 +02:00
OscarSotoSanchez 4eeed8fefd default proxy in specific port 2020-05-08 16:45:11 +02:00
OscarSotoSanchez 2794372f16 fixed check email in LetsEncrypt mode 2020-05-08 14:15:13 +02:00
OscarSotoSanchez b463dea010 updated docker-compose 2.14.0-beta1 2020-05-08 12:25:03 +02:00
OscarSotoSanchez 1df8c83db8 entrypoint proxy updated 2020-05-04 14:24:24 +02:00
OscarSotoSanchez dfda7b2a86 openvidu proxy updated 2020-05-04 13:35:21 +02:00
OscarSotoSanchez cd2f472034 proxy ip restrictions added 2020-04-30 14:27:40 +02:00
OscarSotoSanchez f1a684c615 openvidu proxy updated 2020-04-28 15:53:56 +02:00
OscarSotoSanchez 8af910f1fd Updated proxy image 2020-04-09 16:33:26 +02:00
OscarSotoSanchez 29fcbd7386 Control exist certificated in openvidu-proxy 2020-03-27 12:53:04 +01:00
OscarSotoSanchez 532d3ba2a7 Update docker-compose 2020-03-26 17:37:51 +01:00