Telegram Web K with changes to work inside I2P
https://web.telegram.i2p/
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
63 lines
2.5 KiB
63 lines
2.5 KiB
2 years ago
|
server {
|
||
|
|
listen 127.0.0.1:8080;
|
||
|
|
listen 127.0.0.1:8443 ssl http2;
|
||
|
|
|
||
|
|
access_log /dev/null;
|
||
|
|
error_log /dev/null;
|
||
|
|
|
||
|
|
ssl_certificate /home/www/web.telegram.i2p/certs/web.telegram.i2p.crt;
|
||
|
|
ssl_certificate_key /home/www/web.telegram.i2p/certs/web.telegram.i2p.key;
|
||
|
|
|
||
|
|
ssl_stapling off;
|
||
|
|
ssl_protocols TLSv1.2;
|
||
|
|
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
|
||
|
|
ssl_prefer_server_ciphers off;
|
||
|
|
|
||
|
|
add_header X-Frame-Options 'SAMEORIGIN';
|
||
|
|
add_header X-Xss-Protection '1; mode=block';
|
||
|
|
add_header X-Content-Type-Options 'nosniff';
|
||
|
|
|
||
|
|
root /home/www/web.telegram.i2p/public_html;
|
||
|
|
index index.html;
|
||
|
|
charset utf8;
|
||
|
|
port_in_redirect off;
|
||
|
|
|
||
|
|
gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy application/wasm;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
|
||
|
|
location ~* ^/web/ {
|
||
|
|
rewrite ^/web/(.*)/(.*) /$2 break;
|
||
|
|
proxy_pass https://$1.web.telegram.org;
|
||
|
|
proxy_read_timeout 600s;
|
||
|
|
proxy_http_version 1.1;
|
||
|
|
proxy_set_header Upgrade $http_upgrade;
|
||
|
|
proxy_set_header Connection "upgrade";
|
||
|
|
}
|
||
|
|
|
||
|
|
location ~* ^/([kz])ws(.*)/ {
|
||
|
|
rewrite ^/([kz])ws(.*)/(.*) /$3 break;
|
||
|
|
proxy_pass https://$1ws$2.web.telegram.org;
|
||
|
|
proxy_read_timeout 600s;
|
||
|
|
proxy_http_version 1.1;
|
||
|
|
proxy_set_header Upgrade $http_upgrade;
|
||
|
|
proxy_set_header Connection "upgrade";
|
||
|
|
}
|
||
|
|
|
||
|
|
# Blocks required for websync
|
||
|
|
location ~* ^/telegram-me/ {
|
||
|
|
rewrite ^/telegram-me/(.*) /$1 break;
|
||
|
|
proxy_pass https://telegram.me;
|
||
|
|
}
|
||
|
|
|
||
|
|
location ~* ^/t-me/ {
|
||
|
|
rewrite ^/t-me/(.*) /$1 break;
|
||
|
|
proxy_pass https://t.me;
|
||
|
|
}
|
||
|
|
}
|