mirror of
https://github.com/bigbluebutton/docker.git
synced 2024-12-11 09:21:04 +01:00
ce1a8b0eed
Fix filename regular expression for download of presentation files.
133 lines
4.6 KiB
Nginx Configuration File
Executable File
133 lines
4.6 KiB
Nginx Configuration File
Executable File
# Handle request to bbb-web running within a SpringBoot Tomcat embedded servlet container. This is for BBB-API and Presentation.
|
|
location /bigbluebutton {
|
|
proxy_http_version 1.1;
|
|
|
|
location /bigbluebutton {
|
|
proxy_pass http://core:8090;
|
|
proxy_redirect default;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
# Workaround IE refusal to set cookies in iframe
|
|
add_header P3P 'CP="No P3P policy available"';
|
|
}
|
|
|
|
|
|
location ~ "^\/bigbluebutton\/presentation\/(?<prestoken>[a-zA-Z0-9_-]+)/upload$" {
|
|
proxy_pass http://core:8090;
|
|
proxy_redirect default;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
# Workaround IE refusal to set cookies in iframe
|
|
add_header P3P 'CP="No P3P policy available"';
|
|
|
|
# Allow 30M uploaded presentation document.
|
|
client_max_body_size 30m;
|
|
client_body_buffer_size 128k;
|
|
|
|
proxy_connect_timeout 90;
|
|
proxy_send_timeout 90;
|
|
proxy_read_timeout 90;
|
|
|
|
proxy_buffer_size 4k;
|
|
proxy_buffers 4 32k;
|
|
proxy_busy_buffers_size 64k;
|
|
proxy_temp_file_write_size 64k;
|
|
|
|
include fastcgi_params;
|
|
|
|
proxy_request_buffering off;
|
|
|
|
# Send a sub-request to allow bbb-web to refuse before loading
|
|
auth_request /bigbluebutton/presentation/checkPresentation;
|
|
|
|
}
|
|
|
|
location /bigbluebutton/presentation/download {
|
|
return 404;
|
|
}
|
|
|
|
location ~ "^/bigbluebutton/presentation/download\/[0-9a-f]+-[0-9]+/[0-9a-f]+-[0-9]+$" {
|
|
if ($arg_presFilename !~ "^[0-9a-zA-Z]+-[0-9]+\.[0-9a-zA-Z]+$") {
|
|
return 404;
|
|
}
|
|
proxy_pass http://core:8090$uri$is_args$args;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
# Workaround IE refusal to set cookies in iframe
|
|
add_header P3P 'CP="No P3P policy available"';
|
|
}
|
|
|
|
location = /bigbluebutton/presentation/checkPresentation {
|
|
proxy_pass http://core:8090;
|
|
proxy_redirect default;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header X-Presentation-Token $prestoken;
|
|
proxy_set_header X-Original-URI $request_uri;
|
|
proxy_set_header Content-Length "";
|
|
proxy_set_header X-Original-Content-Length $http_content_length;
|
|
|
|
# Allow 30M uploaded presentation document.
|
|
client_max_body_size 30m;
|
|
client_body_buffer_size 128k;
|
|
|
|
proxy_pass_request_body off;
|
|
proxy_request_buffering off;
|
|
|
|
}
|
|
|
|
# To check connection authentication, include:
|
|
# auth_request /bigbluebutton/connection/checkAuthorization;
|
|
# auth_request_set $auth_status $upstream_status;
|
|
#
|
|
# and make sure to add sessionToken param in the request URI
|
|
location = /bigbluebutton/connection/checkAuthorization {
|
|
internal;
|
|
proxy_pass http://core:8090;
|
|
proxy_pass_request_body off;
|
|
proxy_set_header Content-Length "";
|
|
proxy_set_header X-Original-URI $request_uri;
|
|
}
|
|
|
|
location ~ "^/bigbluebutton\/textTrack\/(?<textTrackToken>[a-zA-Z0-9]+)\/(?<recordId>[a-zA-Z0-9_-]+)\/(?<textTrack>.+)$" {
|
|
# Workaround IE refusal to set cookies in iframe
|
|
add_header P3P 'CP="No P3P policy available"';
|
|
|
|
# Allow 30M uploaded presentation document.
|
|
client_max_body_size 30m;
|
|
client_body_buffer_size 128k;
|
|
|
|
proxy_connect_timeout 90;
|
|
proxy_send_timeout 90;
|
|
proxy_read_timeout 90;
|
|
|
|
proxy_buffer_size 4k;
|
|
proxy_buffers 4 32k;
|
|
proxy_busy_buffers_size 64k;
|
|
proxy_temp_file_write_size 64k;
|
|
|
|
include fastcgi_params;
|
|
|
|
proxy_request_buffering off;
|
|
|
|
# Send a sub-request to allow bbb-web to refuse before loading
|
|
auth_request /bigbluebutton/textTrack/validateAuthToken;
|
|
|
|
default_type text/plain;
|
|
alias /var/bigbluebutton/captions/$recordId/$textTrack;
|
|
|
|
}
|
|
|
|
location = /bigbluebutton/textTrack/validateAuthToken {
|
|
internal;
|
|
proxy_pass http://core:8090;
|
|
proxy_redirect default;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header X-textTrack-token $textTrackToken;
|
|
proxy_set_header X-textTrack-recordId $recordId;
|
|
proxy_set_header X-textTrack-track $textTrack;
|
|
proxy_set_header X-Original-URI $request_uri;
|
|
}
|
|
|
|
}
|