mirror of
https://github.com/zokradonh/kopano-docker
synced 2025-06-07 16:06:14 +00:00
45a506c7dd
* Update kweb to latest release
the fqdn needs to be part of kweb.cfg
make port 2015 explicit
fixes #208
* testing improvements
add git to build container
improve ci testing
add kopano-ical ports to setup
* no longer run kweb as root
now possible because of fd5c7307db
may require to manually delete the kopano_web data volume since kweb user cannot read data from root user.
201 lines
4.3 KiB
INI
201 lines
4.3 KiB
INI
{%FQDN%}:80, :80 {
|
|
redir / https://{host}{uri}
|
|
}
|
|
|
|
# kweb >=0.7.0 needs the explicit hostname to be set
|
|
{%FQDN%}, *:2015, *:443 {
|
|
log stdout
|
|
errors stdout
|
|
|
|
gzip
|
|
header / Server kweb
|
|
|
|
tls {%EMAIL%}
|
|
|
|
limits {
|
|
header 1MB
|
|
body 50MB
|
|
}
|
|
|
|
redir 302 {
|
|
if {path} is /
|
|
/ /webapp/
|
|
}
|
|
|
|
# Config
|
|
proxy /api/config/v1/kopano/meet/ http://kopano_meet:9080/ {
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
transparent
|
|
keepalive 100
|
|
}
|
|
|
|
# Konnect
|
|
proxy /upstreams/konnect/ {
|
|
without /upstreams/konnect/
|
|
upstream kopano_konnect:8777
|
|
policy least_conn
|
|
health_check /health-check
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
keepalive 100
|
|
transparent
|
|
header_downstream Feature-Policy "midi 'none'"
|
|
header_downstream X-Frame-Options "sameorigin"
|
|
}
|
|
ratelimit * 100 200 minute {
|
|
/upstreams/konnect/v1/
|
|
/signin/v1/identifier/_/
|
|
whitelist 127.0.0.1/8
|
|
}
|
|
rewrite /.well-known/openid-configuration {
|
|
to /upstreams/konnect/{path}
|
|
}
|
|
rewrite /konnect/v1/ {
|
|
to /upstreams/konnect/{path}
|
|
}
|
|
rewrite /signin/v1/ {
|
|
to /upstreams/konnect/{path}
|
|
}
|
|
redir /signin /signin/v1/identifier
|
|
|
|
# Kapi
|
|
proxy /upstreams/kapi/ {
|
|
without /upstreams/kapi/
|
|
upstream kopano_kapi:8039
|
|
policy least_conn
|
|
health_check /health-check
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
keepalive 100
|
|
transparent
|
|
websocket
|
|
}
|
|
ratelimit * 100 200 minute {
|
|
/upstreams/kapi/api/
|
|
whitelist 127.0.0.1/8
|
|
}
|
|
rewrite /api/gc/v1/ {
|
|
to /upstreams/kapi/{path}
|
|
}
|
|
rewrite /api/pubs/v1/ {
|
|
to /upstreams/kapi/{path}
|
|
}
|
|
rewrite /api/kvs/v1/ {
|
|
to /upstreams/kapi/{path}
|
|
}
|
|
|
|
# playground for oidc
|
|
proxy /oidc-playground/ http://kopano_playground:8888/ {
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
transparent
|
|
keepalive 100
|
|
}
|
|
folderish /oidc-playground
|
|
|
|
# playground for Kapi
|
|
proxy /kapi-playground/ http://kopano_playground:8888/ {
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
transparent
|
|
keepalive 100
|
|
}
|
|
folderish /kapi-playground
|
|
|
|
|
|
# Kwmserver
|
|
proxy /upstreams/kwmserver/ {
|
|
without /upstreams/kwmserver/
|
|
upstream kopano_kwmserver:8778
|
|
policy least_conn
|
|
health_check /health-check
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
keepalive 100
|
|
transparent
|
|
websocket
|
|
}
|
|
ratelimit * 100 200 minute {
|
|
/upstreams/kwmserver/
|
|
whitelist 127.0.0.1/8
|
|
}
|
|
rewrite /api/kwm/v2/ {
|
|
to /upstreams/kwmserver/{path}
|
|
}
|
|
|
|
proxy /meet/ kopano_meet:9080 {
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
transparent
|
|
keepalive 100
|
|
}
|
|
folderish /meet
|
|
|
|
proxy /webapp/ kopano_webapp:9080 {
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
transparent
|
|
keepalive 100
|
|
}
|
|
folderish /webapp
|
|
|
|
proxy /Microsoft-Server-ActiveSync kopano_zpush:80 {
|
|
transparent
|
|
keepalive 0
|
|
timeout 3540s
|
|
}
|
|
|
|
proxy /AutoDiscover/AutoDiscover.xml kopano_zpush:80 {
|
|
transparent
|
|
keepalive 0
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
}
|
|
|
|
proxy /Autodiscover/Autodiscover.xml kopano_zpush:80 {
|
|
transparent
|
|
keepalive 0
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
}
|
|
|
|
proxy /autodiscover/autodiscover.xml kopano_zpush:80 {
|
|
transparent
|
|
keepalive 0
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
}
|
|
|
|
proxy /caldav/ kopano_ical:8080 {
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
transparent
|
|
}
|
|
folderish /caldav
|
|
|
|
proxy /kdav/ kopano_kdav:80 {
|
|
transparent
|
|
keepalive 0
|
|
fail_timeout 10s
|
|
try_duration 30s
|
|
}
|
|
|
|
redir 301 {
|
|
/.well-known/carddav /kdav/
|
|
/.well-known/caldav /kdav/
|
|
}
|
|
|
|
proxy /ldap-admin/ ldap-admin:80 {
|
|
without /ldap-admin
|
|
transparent
|
|
}
|
|
redir /ldap-admin /ldap-admin/
|
|
|
|
proxy /password-reset/ password-self-service:80 {
|
|
without /password-reset
|
|
transparent
|
|
}
|
|
redir /password-reset /password-reset/
|
|
}
|