Moving KiwiIRC websocket behind Nginx instead of dedicated external port

This commit is contained in:
2025-10-21 15:31:32 -05:00
parent 571455802b
commit 31992aa487
5 changed files with 62 additions and 58 deletions

View File

@@ -83,34 +83,14 @@
# Websockets
<connect
name="websockets"
parent="main"
allow="*"
port="7778">
<bind address=""
port="7778"
hook="websocket"
proxyranges="{{ main_subnet }}/{{ netmask }}"
nativeping="yes"
defaultmode="text"
sslprofile="websockets">
<sslprofile
name="websockets"
provider="openssl"
cafile="/etc/letsencrypt/live/{{ ssl['identity'] }}/chain.pem"
certfile="/etc/letsencrypt/live/{{ ssl['identity'] }}/fullchain.pem"
keyfile="/etc/letsencrypt/live/{{ ssl['identity'] }}/privkey.pem"
ciphers="{{ ssl['ciphersuite'] }}"
hash="sha256"
renegotiation="no"
requestclientcert="no"
sslv3="no"
tlsv1="no"
tlsv11="no"
tlsv12="yes"
tlsv13="yes">
allow="/run/inspircd/websocket.sock">
<bind
path="/run/inspircd/websocket.sock"
type="clients"
hook="websocket"
permissions="0777"
replace="yes">
# Performance
<performance