server {
  listen 443 ssl http2;
  server_name visio.fws.fr;

  ssl_certificate_key /etc/prosody/certs/jitsi.key;
  ssl_certificate     /etc/prosody/certs/jitsi.crt;

  if ($request_method !~ ^(GET|POST|HEAD)$ ) {
    return 405;
  }

  root /opt/jitsi/meet;
  index index.html;

  # conferenceMapper endpoint
  location ~ ^/(phoneNumberList|conferenceMapper) {
    proxy_pass http://localhost:8823;
    proxy_socket_keepalive on;
  }

  # BOSH endpoint
  location /http-bind {
    proxy_socket_keepalive on;
    proxy_pass http://localhost:5280/http-bind;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header Host $http_host;
  }

  # Websocket endpoint
  location /xmpp-websocket {
    proxy_pass http://localhost:5280/xmpp-websocket?$args;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $http_host;
    proxy_set_header X-Forwarded-For $remote_addr;
    tcp_nodelay on;
  }

  # Conference rooms
  location ~ ^/([a-zA-Z0-9=\?]+)$ {
    rewrite ^/(.*)$ / break;
  }
  location / {
    ssi on;
    limit_req zone=limit_req_std burst=100 nodelay;
    limit_conn limit_conn_std 80;
  }

  allow 0.0.0.0/0;
  deny all;
}