mirror of
https://github.com/spantaleev/matrix-docker-ansible-deploy.git
synced 2026-07-13 10:21:09 +03:00
Slavi Pantaleev
b32272ef40
Element Desktop (Electron) loads the location-sharing map style from a `vector://vector` origin, so fetching map_style.json from the Element domain is a cross-origin request. Without an Access-Control-Allow-Origin header, the request is blocked and maps fail to load with "This homeserver is not configured correctly to display maps". Add a dedicated Traefik router for map_style.json that attaches an Access-Control-Allow-Origin header (configurable via matrix_client_element_location_sharing_map_style_access_control_allow_origin, defaulting to `*`). It is only defined when location sharing is enabled. Fixes #2291 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
74 lines
4.2 KiB
Django/Jinja
74 lines
4.2 KiB
Django/Jinja
{#
|
|
SPDX-FileCopyrightText: 2023 - 2024 Slavi Pantaleev
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-or-later
|
|
#}
|
|
|
|
{% if matrix_client_element_container_labels_traefik_enabled %}
|
|
traefik.enable=true
|
|
|
|
{% if matrix_client_element_container_labels_traefik_docker_network %}
|
|
traefik.docker.network={{ matrix_client_element_container_labels_traefik_docker_network }}
|
|
{% endif %}
|
|
|
|
traefik.http.services.matrix-client-element.loadbalancer.server.port=8080
|
|
|
|
{% set middlewares = [] %}
|
|
|
|
{% if matrix_client_element_container_labels_traefik_compression_middleware_enabled %}
|
|
{% set middlewares = middlewares + [matrix_client_element_container_labels_traefik_compression_middleware_name] %}
|
|
{% endif %}
|
|
|
|
{% if matrix_client_element_container_labels_traefik_path_prefix != '/' %}
|
|
traefik.http.middlewares.matrix-client-element-slashless-redirect.redirectregex.regex=({{ matrix_client_element_container_labels_traefik_path_prefix | quote }})$
|
|
traefik.http.middlewares.matrix-client-element-slashless-redirect.redirectregex.replacement=${1}/
|
|
{% set middlewares = middlewares + ['matrix-client-element-slashless-redirect'] %}
|
|
{% endif %}
|
|
|
|
{% if matrix_client_element_container_labels_traefik_path_prefix != '/' %}
|
|
traefik.http.middlewares.matrix-client-element-strip-prefix.stripprefix.prefixes={{ matrix_client_element_container_labels_traefik_path_prefix }}
|
|
{% set middlewares = middlewares + ['matrix-client-element-strip-prefix'] %}
|
|
{% endif %}
|
|
|
|
{% if matrix_client_element_container_labels_traefik_additional_response_headers.keys() | length > 0 %}
|
|
{% for name, value in matrix_client_element_container_labels_traefik_additional_response_headers.items() %}
|
|
traefik.http.middlewares.matrix-client-element-add-headers.headers.customresponseheaders.{{ name }}={{ value }}
|
|
{% endfor %}
|
|
{% set middlewares = middlewares + ['matrix-client-element-add-headers'] %}
|
|
{% endif %}
|
|
|
|
traefik.http.routers.matrix-client-element.rule={{ matrix_client_element_container_labels_traefik_rule }}
|
|
{% if matrix_client_element_container_labels_traefik_priority | int > 0 %}
|
|
traefik.http.routers.matrix-client-element.priority={{ matrix_client_element_container_labels_traefik_priority }}
|
|
{% endif %}
|
|
traefik.http.routers.matrix-client-element.service=matrix-client-element
|
|
{% if middlewares | length > 0 %}
|
|
traefik.http.routers.matrix-client-element.middlewares={{ middlewares | join(',') }}
|
|
{% endif %}
|
|
traefik.http.routers.matrix-client-element.entrypoints={{ matrix_client_element_container_labels_traefik_entrypoints }}
|
|
traefik.http.routers.matrix-client-element.tls={{ matrix_client_element_container_labels_traefik_tls | to_json }}
|
|
{% if matrix_client_element_container_labels_traefik_tls %}
|
|
traefik.http.routers.matrix-client-element.tls.certResolver={{ matrix_client_element_container_labels_traefik_tls_certResolver }}
|
|
{% endif %}
|
|
|
|
{% if matrix_client_element_location_sharing_enabled %}
|
|
{#
|
|
A dedicated router for the map style file, which attaches an Access-Control-Allow-Origin header.
|
|
Element Desktop loads the map style from a `vector://vector` origin, so it needs to be allowed cross-origin access.
|
|
#}
|
|
traefik.http.middlewares.matrix-client-element-map-style-add-headers.headers.customresponseheaders.Access-Control-Allow-Origin={{ matrix_client_element_location_sharing_map_style_access_control_allow_origin }}
|
|
|
|
traefik.http.routers.matrix-client-element-map-style.rule={{ matrix_client_element_container_labels_traefik_rule }} && Path(`{{ (matrix_client_element_container_labels_traefik_path_prefix ~ '/map_style.json') | regex_replace('^//', '/') }}`)
|
|
traefik.http.routers.matrix-client-element-map-style.service=matrix-client-element
|
|
traefik.http.routers.matrix-client-element-map-style.middlewares={{ (middlewares + ['matrix-client-element-map-style-add-headers']) | join(',') }}
|
|
traefik.http.routers.matrix-client-element-map-style.entrypoints={{ matrix_client_element_container_labels_traefik_entrypoints }}
|
|
traefik.http.routers.matrix-client-element-map-style.tls={{ matrix_client_element_container_labels_traefik_tls | to_json }}
|
|
{% if matrix_client_element_container_labels_traefik_tls %}
|
|
traefik.http.routers.matrix-client-element-map-style.tls.certResolver={{ matrix_client_element_container_labels_traefik_tls_certResolver }}
|
|
{% endif %}
|
|
{% endif %}
|
|
|
|
{% endif %}
|
|
|
|
{{ matrix_client_element_container_labels_additional_labels }}
|