hacklab/T-HUB
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Edge: chat root redirects to branded client, serve matrix well-known; onboarding hero full-bleed on black

Browse source
This commit is contained in:
glass beadian 2026-10-12 12:55:05 +00:00
parent 699b9412c1
commit 39dcf7a8b8
2 changed files with 63 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

61
infra/occupymedia/edge/nginx.conf
View file

@ -98,6 +98,38 @@ http {
}
}
server {
listen 80;
listen [::]:80;
server_name chat.occupymedia.cc;
# Tunnel origin path: browsers hitting the bare server root get the branded
# client; the Matrix API flows through untouched.
location = / {
return 302 https://element.occupymedia.cc;
}
# Client discovery for @user:chat.occupymedia.cc logins (tuwunel does not serve it).
location = /.well-known/matrix/client {
default_type application/json;
return 200 '{"m.homeserver":{"base_url":"https://chat.occupymedia.cc"}}';
}
location = /.well-known/matrix/server {
default_type application/json;
return 200 '{"m.server":"chat.occupymedia.cc:443"}';
}
location / {
proxy_pass http://100.117.210.52:6167;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto http;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;
@ -106,6 +138,18 @@ http {
ssl_certificate /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
location = / {
return 302 https://element.occupymedia.cc;
}
location = /.well-known/matrix/client {
default_type application/json;
return 200 '{"m.homeserver":{"base_url":"https://chat.occupymedia.cc"}}';
}
location = /.well-known/matrix/server {
default_type application/json;
return 200 '{"m.server":"chat.occupymedia.cc:443"}';
}
location / {
proxy_pass http://100.117.210.52:6167;
proxy_http_version 1.1;
@ -192,6 +236,23 @@ http {
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name element.occupymedia.cc;
ssl_certificate /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
location / {
proxy_pass http://occ-element:80;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
}
}
# Everything else on this IP: drop the connection.
server {
listen 443 ssl default_server;