Test new proxy conf

.jitsi.subdomain.conf.example

+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name jitsi.*;
+
+    # Manual config start
+    access_log off;
+    ssl_dhparam /config/nginx/dhparams.pem;
+
+    ssl_certificate /config/keys/letsencrypt/fullchain.pem;
+    ssl_certificate_key /config/keys/letsencrypt/privkey.pem;
+
+    ssl_buffer_size 1400;
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_tickets off;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
+    ssl_prefer_server_ciphers on;
+    ssl_stapling on;
+    ssl_stapling_verify on;
+    ssl_ecdh_curve X25519:P-384:P-256:P-521;
+    resolver 127.0.0.11 valid=30s;
+    resolver_timeout 5s;
+
+    add_header Content-Security-Policy "default-src https: data: 'unsafe-inline' 'unsafe-eval'";
+    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
+    add_header X-Xss-Protection "1; mode=block";
+    add_header X-Content-Type-Options nosniff;
+    add_header Referrer-Policy same-origin;
+    proxy_cookie_path / "/; HTTPOnly; Secure";
+    add_header Expect-CT "enforce, max-age=21600";
+    add_header Feature-Policy "payment none";
+
+    keepalive_timeout    70;
+    sendfile             on;
+
+    gzip on;
+    gzip_disable "msie6";
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_buffers 16 8k;
+    gzip_http_version 1.1;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+    
+    # Manual config end
+
+    client_max_body_size 0;
+
+    location / {
+        include /config/nginx/proxy.conf;
+        resolver 127.0.0.11 valid=30s;
+        set $upstream_jitsi jitsi_web;
+        proxy_max_temp_file_size 2048m;
+        proxy_pass http://$upstream_jitsi:80;
+    }
+}

jitsi.subdomain.conf.example

 server {
+    listen 80;
     listen 443 ssl http2;
-    listen [::]:443 ssl http2;
-
+        listen[::]:443 ssk http2;
     server_name jitsi.*;
 
-    # Manual config start
-    access_log off;
-    ssl_dhparam /config/nginx/dhparams.pem;
-
-    ssl_certificate /config/keys/letsencrypt/fullchain.pem;
-    ssl_certificate_key /config/keys/letsencrypt/privkey.pem;
-
-    ssl_buffer_size 1400;
-    ssl_session_timeout 1d;
-    ssl_session_cache shared:SSL:50m;
-    ssl_session_tickets off;
-    ssl_protocols TLSv1.2 TLSv1.3;
-    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
-    ssl_prefer_server_ciphers on;
-    ssl_stapling on;
-    ssl_stapling_verify on;
-    ssl_ecdh_curve X25519:P-384:P-256:P-521;
-    resolver 127.0.0.11 valid=30s;
-    resolver_timeout 5s;
-
-    add_header Content-Security-Policy "default-src https: data: 'unsafe-inline' 'unsafe-eval'";
-    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
-    add_header X-Xss-Protection "1; mode=block";
-    add_header X-Content-Type-Options nosniff;
-    add_header Referrer-Policy same-origin;
-    proxy_cookie_path / "/; HTTPOnly; Secure";
-    add_header Expect-CT "enforce, max-age=21600";
-    add_header Feature-Policy "payment none";
-
-    keepalive_timeout    70;
-    sendfile             on;
-
-    gzip on;
-    gzip_disable "msie6";
-    gzip_vary on;
-    gzip_proxied any;
-    gzip_comp_level 6;
-    gzip_buffers 16 8k;
-    gzip_http_version 1.1;
-    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
-    
-    # Manual config end
-
-    client_max_body_size 0;
 
     location / {
+        ssi on;
         include /config/nginx/proxy.conf;
-        resolver 127.0.0.11 valid=30s;
-        set $upstream_jitsi jitsi_web;
-        proxy_max_temp_file_size 2048m;
-        proxy_pass http://$upstream_jitsi:80;
+        proxy_pass http://jitsi_web;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header Host $http_host;
+    }
+    location /http-bind {
+        proxy_pass http://jitsi_xmpp:5280/http-bind;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header Host $http_host;
+    }
+    location /xmpp-websocket {
+        proxy_pass http://jitsi_xmpp:5280/xmpp-websocket;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        tcp_nodelay on;
     }
 }
\ No newline at end of file