glass beadian
fe5f2403d6
- api: matrix-sso module (tuwunel jwt -> login/get_token), POST /matrix/session, GET /matrix/identity, drive controller - web: /chat full-height Element view, /files Library+Drive tabs, embedded-app frame component - edge: /hub-sso.html handshake route (origin-pinned CSP), X-Frame-Options strip on files - oCIS: csp.yaml frame-ancestors app.occupymedia.cc - server config still required: tuwunel [global.jwt], MATRIX_SSO_JWT_SECRET, oCIS restart
18 lines
402 B
YAML
18 lines
402 B
YAML
services:
|
|
edge:
|
|
image: nginx:1.27-alpine
|
|
container_name: occ-edge-1
|
|
restart: unless-stopped
|
|
networks: [occ-app_default]
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
volumes:
|
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
|
- /opt/occ-brand:/opt/occ-brand:ro
|
|
- ./hub-sso:/opt/hub-sso:ro
|
|
- ./certs:/etc/letsencrypt:ro
|
|
|
|
networks:
|
|
occ-app_default:
|
|
external: true
|