Snippets

s/cors

@@ -0,0 +1 @@
+add_header Access-Control-Allow-Origin * always;

s/listen

@@ -0,0 +1,2 @@
+listen 443 ssl;
+listen [::]:443 ssl;

s/matrix

@@ -0,0 +1,5 @@
+location /.well-known/matrix/ {
+  alias /var/www/.well-known/matrix/;
+  include s/cors;
+  add_header Content-Type application/json;
+}

s/reverse

@@ -0,0 +1,4 @@
+proxy_pass http://$upstream;
+proxy_http_version 1.1;
+proxy_set_header Host $host;
+proxy_set_header Connection "";

s/static

@@ -0,0 +1,17 @@
+location ~* \.(?:manifest|appcache|html?|xml|json)$ {
+    expires -1;
+}
+
+location ~* \.(?:jpe?g|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc)$ {
+    expires 1M;
+    add_header Cache-Control "public";
+}
+
+location ~* \.(?:css|js)$ {
+    expires 1y;
+    add_header Cache-Control "public";
+}
+
+location ~ /\.ht {
+    deny all;
+}

s/webapp

@@ -0,0 +1,3 @@
+location / {
+  try_files $uri $uri/ /index.html$is_args$args;
+}

s/websocket

@@ -0,0 +1,2 @@
+proxy_set_header Connection "upgrade";
+proxy_set_header Upgrade $http_upgrade;

s/xfwd

@@ -0,0 +1 @@
+proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;