debian: Don't break those still using ALPN multiplex (Fixes jitsi#7794)…

… (jitsi#7796) * fix: Don't break those still using ALPN multiplex (Fixes jitsi#7794) * squash: Update doc/debian/jitsi-meet/jitsi-meet.conf Co-authored-by: Saúl Ibarra Corretgé <[email protected]> Co-authored-by: Saúl Ibarra Corretgé <[email protected]>
roy-loomy · Sep 29, 2020 · 91f636a · 91f636a
1 parent fa4df19
commit 91f636a
Show file tree

Hide file tree

Showing 2 changed files with 35 additions and 0 deletions.
diff --git a/debian/jitsi-meet-turnserver.install b/debian/jitsi-meet-turnserver.install
@@ -1,2 +1,3 @@
 doc/debian/jitsi-meet-turn/turnserver.conf          /usr/share/jitsi-meet-turnserver/
+doc/debian/jitsi-meet/jitsi-meet.conf               /usr/share/jitsi-meet-turnserver/
 doc/debian/jitsi-meet-turn/coturn-certbot-deploy.sh /usr/share/jitsi-meet-turnserver/
diff --git a/doc/debian/jitsi-meet/jitsi-meet.conf b/doc/debian/jitsi-meet/jitsi-meet.conf
@@ -0,0 +1,34 @@
+# this is jitsi-meet nginx module configuration
+# this forward all http traffic to the nginx virtual host port
+# and the rest to the turn server
+#
+# Multiplexing based on ALPN is DEPRECATED. ALPN does not play well with websockets on some browsers and reverse proxies.
+# To migrate away from using it read: https://jitsi.org/multiplexing-to-bridge-ws-howto
+# This file will be removed at some point and if deployment is still using it, will break.
+#
+stream {
+    upstream web {
+        server 127.0.0.1:4444;
+    }
+    upstream turn {
+        server 127.0.0.1:5349;
+    }
+    # since 1.13.10
+    map $ssl_preread_alpn_protocols $upstream {
+        ~\bh2\b         web;
+        ~\bhttp/1\.     web;
+        default         turn;
+    }
+
+    server {
+        listen 443;
+        listen [::]:443;
+
+        # since 1.11.5
+        ssl_preread on;
+        proxy_pass $upstream;
+
+        # Increase buffer to serve video
+        proxy_buffer_size 10m;
+    }
+}