zeus
3 years ago
8 changed files with 1202 additions and 0 deletions
@ -0,0 +1,412 @@ |
|||||
|
# shellcheck disable=SC2034 |
||||
|
|
||||
|
# Security |
||||
|
# |
||||
|
# Set these to strong passwords to avoid intruders from impersonating a service account |
||||
|
# The service(s) won't start unless these are specified |
||||
|
# Running ./gen-passwords.sh will update .env with strong passwords |
||||
|
# You may skip the Jigasi and Jibri passwords if you are not using those |
||||
|
# DO NOT reuse passwords |
||||
|
# |
||||
|
|
||||
|
# XMPP password for Jicofo client connections |
||||
|
JICOFO_AUTH_PASSWORD=284e5595787065de58f350ab54c151be |
||||
|
|
||||
|
# XMPP password for JVB client connections |
||||
|
JVB_AUTH_PASSWORD=fef77dc4580183b366dbe65357538716 |
||||
|
|
||||
|
# XMPP password for Jigasi MUC client connections |
||||
|
JIGASI_XMPP_PASSWORD=d41efde399375d50871f28aa9a078b3e |
||||
|
|
||||
|
# XMPP recorder password for Jibri client connections |
||||
|
JIBRI_RECORDER_PASSWORD=f785cb7d5d9816ff5f9ca781fd544ee8 |
||||
|
|
||||
|
# XMPP password for Jibri client connections |
||||
|
JIBRI_XMPP_PASSWORD=cdbea33c1a65a55ffb4a080a5cb1a9f7 |
||||
|
|
||||
|
|
||||
|
# |
||||
|
# Basic configuration options |
||||
|
# |
||||
|
|
||||
|
# Directory where all configuration will be stored |
||||
|
#CONFIG=/data/appl/ok/gitversion/examples-services/tmp-test/jitsi/docker-jitsi-meet-stable-6726/.jitsi-meet-cfg/.jitsi-meet-cfg |
||||
|
CONFIG=./.jitsi-meet-cfg |
||||
|
#CONFIG=.jitsi-meet-cfg |
||||
|
|
||||
|
# Exposed HTTP port |
||||
|
HTTP_PORT=9083 |
||||
|
|
||||
|
# Exposed HTTPS port |
||||
|
HTTPS_PORT=9043 |
||||
|
|
||||
|
# System time zone |
||||
|
TZ=UTC |
||||
|
|
||||
|
# Public URL for the web service (required) |
||||
|
#PUBLIC_URL=https://meet.example.com |
||||
|
|
||||
|
# IP address of the Docker host |
||||
|
# See the "Running behind NAT or on a LAN environment" section in the Handbook: |
||||
|
# https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker#running-behind-nat-or-on-a-lan-environment |
||||
|
#DOCKER_HOST_ADDRESS=192.168.1.1 |
||||
|
|
||||
|
# Control whether the lobby feature should be enabled or not |
||||
|
#ENABLE_LOBBY=1 |
||||
|
|
||||
|
# Control whether the A/V moderation should be enabled or not |
||||
|
#ENABLE_AV_MODERATION=1 |
||||
|
|
||||
|
# Show a prejoin page before entering a conference |
||||
|
#ENABLE_PREJOIN_PAGE=0 |
||||
|
|
||||
|
# Enable the welcome page |
||||
|
#ENABLE_WELCOME_PAGE=1 |
||||
|
|
||||
|
# Enable the close page |
||||
|
#ENABLE_CLOSE_PAGE=0 |
||||
|
|
||||
|
# Disable measuring of audio levels |
||||
|
#DISABLE_AUDIO_LEVELS=0 |
||||
|
|
||||
|
# Enable noisy mic detection |
||||
|
#ENABLE_NOISY_MIC_DETECTION=1 |
||||
|
|
||||
|
# |
||||
|
# Let's Encrypt configuration |
||||
|
# |
||||
|
|
||||
|
# Enable Let's Encrypt certificate generation |
||||
|
#ENABLE_LETSENCRYPT=1 |
||||
|
|
||||
|
# Domain for which to generate the certificate |
||||
|
#LETSENCRYPT_DOMAIN=meet.example.com |
||||
|
|
||||
|
# E-Mail for receiving important account notifications (mandatory) |
||||
|
#LETSENCRYPT_EMAIL=alice@atlanta.net |
||||
|
|
||||
|
# Use the staging server (for avoiding rate limits while testing) |
||||
|
#LETSENCRYPT_USE_STAGING=1 |
||||
|
|
||||
|
|
||||
|
# |
||||
|
# Etherpad integration (for document sharing) |
||||
|
# |
||||
|
|
||||
|
# Set etherpad-lite URL in docker local network (uncomment to enable) |
||||
|
#ETHERPAD_URL_BASE=http://etherpad.meet.jitsi:9001 |
||||
|
|
||||
|
# Set etherpad-lite public URL (uncomment to enable) |
||||
|
#ETHERPAD_PUBLIC_URL=https://etherpad.my.domain |
||||
|
|
||||
|
# Name your etherpad instance! |
||||
|
ETHERPAD_TITLE=Video Chat |
||||
|
|
||||
|
# The default text of a pad |
||||
|
ETHERPAD_DEFAULT_PAD_TEXT="Welcome to Web Chat!\n\n" |
||||
|
|
||||
|
# Name of the skin for etherpad |
||||
|
ETHERPAD_SKIN_NAME=colibris |
||||
|
|
||||
|
# Skin variants for etherpad |
||||
|
ETHERPAD_SKIN_VARIANTS="super-light-toolbar super-light-editor light-background full-width-editor" |
||||
|
|
||||
|
|
||||
|
# |
||||
|
# Basic Jigasi configuration options (needed for SIP gateway support) |
||||
|
# |
||||
|
|
||||
|
# SIP URI for incoming / outgoing calls |
||||
|
#JIGASI_SIP_URI=test@sip2sip.info |
||||
|
|
||||
|
# Password for the specified SIP account as a clear text |
||||
|
#JIGASI_SIP_PASSWORD=passw0rd |
||||
|
|
||||
|
# SIP server (use the SIP account domain if in doubt) |
||||
|
#JIGASI_SIP_SERVER=sip2sip.info |
||||
|
|
||||
|
# SIP server port |
||||
|
#JIGASI_SIP_PORT=5060 |
||||
|
|
||||
|
# SIP server transport |
||||
|
#JIGASI_SIP_TRANSPORT=UDP |
||||
|
|
||||
|
# |
||||
|
# Authentication configuration (see handbook for details) |
||||
|
# |
||||
|
|
||||
|
# Enable authentication |
||||
|
#ENABLE_AUTH=1 |
||||
|
|
||||
|
# Enable guest access |
||||
|
#ENABLE_GUESTS=1 |
||||
|
|
||||
|
# Select authentication type: internal, jwt or ldap |
||||
|
#AUTH_TYPE=internal |
||||
|
|
||||
|
# JWT authentication |
||||
|
# |
||||
|
|
||||
|
# Application identifier |
||||
|
#JWT_APP_ID=my_jitsi_app_id |
||||
|
|
||||
|
# Application secret known only to your token generator |
||||
|
#JWT_APP_SECRET=my_jitsi_app_secret |
||||
|
|
||||
|
# (Optional) Set asap_accepted_issuers as a comma separated list |
||||
|
#JWT_ACCEPTED_ISSUERS=my_web_client,my_app_client |
||||
|
|
||||
|
# (Optional) Set asap_accepted_audiences as a comma separated list |
||||
|
#JWT_ACCEPTED_AUDIENCES=my_server1,my_server2 |
||||
|
|
||||
|
|
||||
|
# LDAP authentication (for more information see the Cyrus SASL saslauthd.conf man page) |
||||
|
# |
||||
|
|
||||
|
# LDAP url for connection |
||||
|
#LDAP_URL=ldaps://ldap.domain.com/ |
||||
|
|
||||
|
# LDAP base DN. Can be empty |
||||
|
#LDAP_BASE=DC=example,DC=domain,DC=com |
||||
|
|
||||
|
# LDAP user DN. Do not specify this parameter for the anonymous bind |
||||
|
#LDAP_BINDDN=CN=binduser,OU=users,DC=example,DC=domain,DC=com |
||||
|
|
||||
|
# LDAP user password. Do not specify this parameter for the anonymous bind |
||||
|
#LDAP_BINDPW=LdapUserPassw0rd |
||||
|
|
||||
|
# LDAP filter. Tokens example: |
||||
|
# %1-9 - if the input key is user@mail.domain.com, then %1 is com, %2 is domain and %3 is mail |
||||
|
# %s - %s is replaced by the complete service string |
||||
|
# %r - %r is replaced by the complete realm string |
||||
|
#LDAP_FILTER=(sAMAccountName=%u) |
||||
|
|
||||
|
# LDAP authentication method |
||||
|
#LDAP_AUTH_METHOD=bind |
||||
|
|
||||
|
# LDAP version |
||||
|
#LDAP_VERSION=3 |
||||
|
|
||||
|
# LDAP TLS using |
||||
|
#LDAP_USE_TLS=1 |
||||
|
|
||||
|
# List of SSL/TLS ciphers to allow |
||||
|
#LDAP_TLS_CIPHERS=SECURE256:SECURE128:!AES-128-CBC:!ARCFOUR-128:!CAMELLIA-128-CBC:!3DES-CBC:!CAMELLIA-128-CBC |
||||
|
|
||||
|
# Require and verify server certificate |
||||
|
#LDAP_TLS_CHECK_PEER=1 |
||||
|
|
||||
|
# Path to CA cert file. Used when server certificate verify is enabled |
||||
|
#LDAP_TLS_CACERT_FILE=/etc/ssl/certs/ca-certificates.crt |
||||
|
|
||||
|
# Path to CA certs directory. Used when server certificate verify is enabled |
||||
|
#LDAP_TLS_CACERT_DIR=/etc/ssl/certs |
||||
|
|
||||
|
# Wether to use starttls, implies LDAPv3 and requires ldap:// instead of ldaps:// |
||||
|
# LDAP_START_TLS=1 |
||||
|
|
||||
|
|
||||
|
# |
||||
|
# Advanced configuration options (you generally don't need to change these) |
||||
|
# |
||||
|
|
||||
|
# Internal XMPP domain |
||||
|
XMPP_DOMAIN=meet.jitsi |
||||
|
|
||||
|
# Internal XMPP server |
||||
|
XMPP_SERVER=jitsiprosody.microservice-jitsimeet_meet.jitsi |
||||
|
|
||||
|
# Internal XMPP server URL |
||||
|
XMPP_BOSH_URL_BASE=http://jitsiprosody.microservice-jitsimeet_meet.jitsi:5280 |
||||
|
|
||||
|
# Internal XMPP domain for authenticated services |
||||
|
XMPP_AUTH_DOMAIN=auth.meet.jitsi |
||||
|
|
||||
|
# XMPP domain for the MUC |
||||
|
XMPP_MUC_DOMAIN=muc.meet.jitsi |
||||
|
|
||||
|
# XMPP domain for the internal MUC used for jibri, jigasi and jvb pools |
||||
|
XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi |
||||
|
|
||||
|
# XMPP domain for unauthenticated users |
||||
|
XMPP_GUEST_DOMAIN=guest.meet.jitsi |
||||
|
|
||||
|
# Comma separated list of domains for cross domain policy or "true" to allow all |
||||
|
# The PUBLIC_URL is always allowed |
||||
|
#XMPP_CROSS_DOMAIN=true |
||||
|
|
||||
|
# Custom Prosody modules for XMPP_DOMAIN (comma separated) |
||||
|
XMPP_MODULES= |
||||
|
|
||||
|
# Custom Prosody modules for MUC component (comma separated) |
||||
|
XMPP_MUC_MODULES= |
||||
|
|
||||
|
# Custom Prosody modules for internal MUC component (comma separated) |
||||
|
XMPP_INTERNAL_MUC_MODULES= |
||||
|
|
||||
|
# MUC for the JVB pool |
||||
|
JVB_BREWERY_MUC=jvbbrewery |
||||
|
|
||||
|
# XMPP user for JVB client connections |
||||
|
JVB_AUTH_USER=jvb |
||||
|
|
||||
|
# STUN servers used to discover the server's public IP |
||||
|
JVB_STUN_SERVERS=meet-jit-si-turnrelay.jitsi.net:443 |
||||
|
|
||||
|
# Media port for the Jitsi Videobridge |
||||
|
JVB_PORT=10000 |
||||
|
|
||||
|
# TCP Fallback for Jitsi Videobridge for when UDP isn't available |
||||
|
JVB_TCP_HARVESTER_DISABLED=true |
||||
|
JVB_TCP_PORT=4443 |
||||
|
JVB_TCP_MAPPED_PORT=4443 |
||||
|
|
||||
|
# XMPP user for Jicofo client connections. |
||||
|
# NOTE: this option doesn't currently work due to a bug |
||||
|
JICOFO_AUTH_USER=focus |
||||
|
|
||||
|
# Base URL of Jicofo's reservation REST API |
||||
|
#JICOFO_RESERVATION_REST_BASE_URL=http://reservation.example.com |
||||
|
|
||||
|
# Enable Jicofo's health check REST API (http://<jicofo_base_url>:8888/about/health) |
||||
|
#JICOFO_ENABLE_HEALTH_CHECKS=true |
||||
|
|
||||
|
# XMPP user for Jigasi MUC client connections |
||||
|
JIGASI_XMPP_USER=jigasi |
||||
|
|
||||
|
# MUC name for the Jigasi pool |
||||
|
JIGASI_BREWERY_MUC=jigasibrewery |
||||
|
|
||||
|
# Minimum port for media used by Jigasi |
||||
|
JIGASI_PORT_MIN=20000 |
||||
|
|
||||
|
# Maximum port for media used by Jigasi |
||||
|
JIGASI_PORT_MAX=20050 |
||||
|
|
||||
|
# Enable SDES srtp |
||||
|
#JIGASI_ENABLE_SDES_SRTP=1 |
||||
|
|
||||
|
# Keepalive method |
||||
|
#JIGASI_SIP_KEEP_ALIVE_METHOD=OPTIONS |
||||
|
|
||||
|
# Health-check extension |
||||
|
#JIGASI_HEALTH_CHECK_SIP_URI=keepalive |
||||
|
|
||||
|
# Health-check interval |
||||
|
#JIGASI_HEALTH_CHECK_INTERVAL=300000 |
||||
|
# |
||||
|
# Enable Jigasi transcription |
||||
|
#ENABLE_TRANSCRIPTIONS=1 |
||||
|
|
||||
|
# Jigasi will record audio when transcriber is on [default: false] |
||||
|
#JIGASI_TRANSCRIBER_RECORD_AUDIO=true |
||||
|
|
||||
|
# Jigasi will send transcribed text to the chat when transcriber is on [default: false] |
||||
|
#JIGASI_TRANSCRIBER_SEND_TXT=true |
||||
|
|
||||
|
# Jigasi will post an url to the chat with transcription file [default: false] |
||||
|
#JIGASI_TRANSCRIBER_ADVERTISE_URL=true |
||||
|
|
||||
|
# Credentials for connect to Cloud Google API from Jigasi |
||||
|
# Please read https://cloud.google.com/text-to-speech/docs/quickstart-protocol |
||||
|
# section "Before you begin" paragraph 1 to 5 |
||||
|
# Copy the values from the json to the related env vars |
||||
|
#GC_PROJECT_ID= |
||||
|
#GC_PRIVATE_KEY_ID= |
||||
|
#GC_PRIVATE_KEY= |
||||
|
#GC_CLIENT_EMAIL= |
||||
|
#GC_CLIENT_ID= |
||||
|
#GC_CLIENT_CERT_URL= |
||||
|
|
||||
|
# Enable recording |
||||
|
#ENABLE_RECORDING=1 |
||||
|
|
||||
|
# XMPP domain for the jibri recorder |
||||
|
XMPP_RECORDER_DOMAIN=recorder.meet.jitsi |
||||
|
|
||||
|
# XMPP recorder user for Jibri client connections |
||||
|
JIBRI_RECORDER_USER=recorder |
||||
|
|
||||
|
# Directory for recordings inside Jibri container |
||||
|
JIBRI_RECORDING_DIR=/config/recordings |
||||
|
|
||||
|
# The finalizing script. Will run after recording is complete |
||||
|
#JIBRI_FINALIZE_RECORDING_SCRIPT_PATH=/config/finalize.sh |
||||
|
|
||||
|
# XMPP user for Jibri client connections |
||||
|
JIBRI_XMPP_USER=jibri |
||||
|
|
||||
|
# MUC name for the Jibri pool |
||||
|
JIBRI_BREWERY_MUC=jibribrewery |
||||
|
|
||||
|
# MUC connection timeout |
||||
|
JIBRI_PENDING_TIMEOUT=90 |
||||
|
|
||||
|
# When jibri gets a request to start a service for a room, the room |
||||
|
# jid will look like: roomName@optional.prefixes.subdomain.xmpp_domain |
||||
|
# We'll build the url for the call by transforming that into: |
||||
|
# https://xmpp_domain/subdomain/roomName |
||||
|
# So if there are any prefixes in the jid (like jitsi meet, which |
||||
|
# has its participants join a muc at conference.xmpp_domain) then |
||||
|
# list that prefix here so it can be stripped out to generate |
||||
|
# the call url correctly |
||||
|
JIBRI_STRIP_DOMAIN_JID=muc |
||||
|
|
||||
|
# Directory for logs inside Jibri container |
||||
|
JIBRI_LOGS_DIR=/config/logs |
||||
|
|
||||
|
# Configure an external TURN server |
||||
|
# TURN_CREDENTIALS=secret |
||||
|
# TURN_HOST=turnserver.example.com |
||||
|
# TURN_PORT=443 |
||||
|
# TURNS_HOST=turnserver.example.com |
||||
|
# TURNS_PORT=443 |
||||
|
|
||||
|
# Disable HTTPS: handle TLS connections outside of this setup |
||||
|
#DISABLE_HTTPS=1 |
||||
|
|
||||
|
# Enable FLoC |
||||
|
# Opt-In to Federated Learning of Cohorts tracking |
||||
|
#ENABLE_FLOC=0 |
||||
|
|
||||
|
# Redirect HTTP traffic to HTTPS |
||||
|
# Necessary for Let's Encrypt, relies on standard HTTPS port (443) |
||||
|
#ENABLE_HTTP_REDIRECT=1 |
||||
|
|
||||
|
# Send a `strict-transport-security` header to force browsers to use |
||||
|
# a secure and trusted connection. Recommended for production use. |
||||
|
# Defaults to 1 (send the header). |
||||
|
# ENABLE_HSTS=1 |
||||
|
|
||||
|
# Enable IPv6 |
||||
|
# Provides means to disable IPv6 in environments that don't support it (get with the times, people!) |
||||
|
#ENABLE_IPV6=1 |
||||
|
|
||||
|
# Container restart policy |
||||
|
# Defaults to unless-stopped |
||||
|
RESTART_POLICY=unless-stopped |
||||
|
|
||||
|
ENABLE_XMPP_WEBSOCKET=0 |
||||
|
#ENABLE_SCTP=1 |
||||
|
#ENABLE_COLIBRI_WEBSOCKET=0 |
||||
|
#ENABLE_XMPP_WEBSOCKET=0 |
||||
|
|
||||
|
# Authenticate using external service or just focus external auth window if there is one already. |
||||
|
# TOKEN_AUTH_URL=https://auth.meet.example.com/{room} |
||||
|
|
||||
|
# Sentry Error Tracking |
||||
|
# Sentry Data Source Name (Endpoint for Sentry project) |
||||
|
# Example: https://public:private@host:port/1 |
||||
|
#JVB_SENTRY_DSN= |
||||
|
#JICOFO_SENTRY_DSN= |
||||
|
#JIGASI_SENTRY_DSN= |
||||
|
|
||||
|
# Optional environment info to filter events |
||||
|
#SENTRY_ENVIRONMENT=production |
||||
|
|
||||
|
# Optional release info to filter events |
||||
|
#SENTRY_RELEASE=1.0.0 |
||||
|
|
||||
|
# Optional properties for shutdown api |
||||
|
#COLIBRI_REST_ENABLED=true |
||||
|
#SHUTDOWN_REST_ENABLED=true |
||||
@ -0,0 +1,14 @@ |
|||||
|
#!/bin/bash |
||||
|
|
||||
|
|
||||
|
|
||||
|
running="$(docker-compose ps --services --filter "status=running")" |
||||
|
services="$(docker-compose ps --services)" |
||||
|
if [ "$running" != "$services" ]; then |
||||
|
# Bash specific |
||||
|
RUN=$(comm -13 <(sort <<<"$running") <(sort <<<"$services")) |
||||
|
echo "Following_services_are_not_running:" |
||||
|
echo "$RUN" |
||||
|
else |
||||
|
echo "All_services_are_running" |
||||
|
fi |
||||
@ -0,0 +1,2 @@ |
|||||
|
#!/bin/bash |
||||
|
mkdir -p .jitsi-meet-cfg/{web/crontabs,web/letsencrypt,transcripts,prosody/config,prosody/prosody-plugins-custom,jicofo,jvb,jigasi,jibri} |
||||
@ -0,0 +1,304 @@ |
|||||
|
version: '3' |
||||
|
|
||||
|
services: |
||||
|
# Frontend |
||||
|
web: |
||||
|
image: jitsi/web:stable-6726 |
||||
|
restart: ${RESTART_POLICY} |
||||
|
container_name: jitsiweb |
||||
|
ports: |
||||
|
- '${HTTP_PORT}:80' |
||||
|
- '${HTTPS_PORT}:443' |
||||
|
volumes: |
||||
|
- ${CONFIG}/web:/config:Z |
||||
|
- ${CONFIG}/web/crontabs:/var/spool/cron/crontabs:Z |
||||
|
- ${CONFIG}/transcripts:/usr/share/jitsi-meet/transcripts:Z |
||||
|
environment: |
||||
|
- AMPLITUDE_ID |
||||
|
- ANALYTICS_SCRIPT_URLS |
||||
|
- ANALYTICS_WHITELISTED_EVENTS |
||||
|
- CALLSTATS_CUSTOM_SCRIPT_URL |
||||
|
- CALLSTATS_ID |
||||
|
- CALLSTATS_SECRET |
||||
|
- CHROME_EXTENSION_BANNER_JSON |
||||
|
- CONFCODE_URL |
||||
|
- CONFIG_EXTERNAL_CONNECT |
||||
|
- DEFAULT_LANGUAGE |
||||
|
- DEPLOYMENTINFO_ENVIRONMENT |
||||
|
- DEPLOYMENTINFO_ENVIRONMENT_TYPE |
||||
|
- DEPLOYMENTINFO_REGION |
||||
|
- DEPLOYMENTINFO_SHARD |
||||
|
- DEPLOYMENTINFO_USERREGION |
||||
|
- DESKTOP_SHARING_FRAMERATE_MIN |
||||
|
- DESKTOP_SHARING_FRAMERATE_MAX |
||||
|
- DIALIN_NUMBERS_URL |
||||
|
- DIALOUT_AUTH_URL |
||||
|
- DIALOUT_CODES_URL |
||||
|
- DISABLE_AUDIO_LEVELS |
||||
|
- DISABLE_DEEP_LINKING |
||||
|
- DISABLE_HTTPS |
||||
|
- DISABLE_POLLS |
||||
|
- DISABLE_REACTIONS |
||||
|
- DROPBOX_APPKEY |
||||
|
- DROPBOX_REDIRECT_URI |
||||
|
- DYNAMIC_BRANDING_URL |
||||
|
- ENABLE_AUDIO_PROCESSING |
||||
|
- ENABLE_AUTH |
||||
|
- ENABLE_BREAKOUT_ROOMS |
||||
|
- ENABLE_CALENDAR |
||||
|
- ENABLE_COLIBRI_WEBSOCKET |
||||
|
- ENABLE_FILE_RECORDING_SERVICE |
||||
|
- ENABLE_FILE_RECORDING_SERVICE_SHARING |
||||
|
- ENABLE_FLOC |
||||
|
- ENABLE_GUESTS |
||||
|
- ENABLE_HSTS |
||||
|
- ENABLE_HTTP_REDIRECT |
||||
|
- ENABLE_IPV6 |
||||
|
- ENABLE_LETSENCRYPT |
||||
|
- ENABLE_LIPSYNC |
||||
|
- ENABLE_NO_AUDIO_DETECTION |
||||
|
- ENABLE_NOISY_MIC_DETECTION |
||||
|
- ENABLE_PREJOIN_PAGE |
||||
|
- ENABLE_P2P |
||||
|
- ENABLE_WELCOME_PAGE |
||||
|
- ENABLE_CLOSE_PAGE |
||||
|
- ENABLE_RECORDING |
||||
|
- ENABLE_REMB |
||||
|
- ENABLE_REQUIRE_DISPLAY_NAME |
||||
|
- ENABLE_SIMULCAST |
||||
|
- ENABLE_STATS_ID |
||||
|
- ENABLE_STEREO |
||||
|
- ENABLE_SUBDOMAINS |
||||
|
- ENABLE_TALK_WHILE_MUTED |
||||
|
- ENABLE_TCC |
||||
|
- ENABLE_TRANSCRIPTIONS |
||||
|
- ENABLE_XMPP_WEBSOCKET |
||||
|
- ETHERPAD_PUBLIC_URL |
||||
|
- ETHERPAD_URL_BASE |
||||
|
- GOOGLE_ANALYTICS_ID |
||||
|
- GOOGLE_API_APP_CLIENT_ID |
||||
|
- INVITE_SERVICE_URL |
||||
|
- JICOFO_AUTH_USER |
||||
|
- LETSENCRYPT_DOMAIN |
||||
|
- LETSENCRYPT_EMAIL |
||||
|
- LETSENCRYPT_USE_STAGING |
||||
|
- MATOMO_ENDPOINT |
||||
|
- MATOMO_SITE_ID |
||||
|
- MICROSOFT_API_APP_CLIENT_ID |
||||
|
- NGINX_RESOLVER |
||||
|
- NGINX_WORKER_PROCESSES |
||||
|
- NGINX_WORKER_CONNECTIONS |
||||
|
- PEOPLE_SEARCH_URL |
||||
|
- PUBLIC_URL |
||||
|
- P2P_PREFERRED_CODEC |
||||
|
- RESOLUTION |
||||
|
- RESOLUTION_MIN |
||||
|
- RESOLUTION_WIDTH |
||||
|
- RESOLUTION_WIDTH_MIN |
||||
|
- START_AUDIO_MUTED |
||||
|
- START_AUDIO_ONLY |
||||
|
- START_BITRATE |
||||
|
- START_SILENT |
||||
|
- START_WITH_AUDIO_MUTED |
||||
|
- START_VIDEO_MUTED |
||||
|
- START_WITH_VIDEO_MUTED |
||||
|
- TESTING_CAP_SCREENSHARE_BITRATE |
||||
|
- TESTING_OCTO_PROBABILITY |
||||
|
- TOKEN_AUTH_URL |
||||
|
- TZ |
||||
|
- VIDEOQUALITY_BITRATE_H264_LOW |
||||
|
- VIDEOQUALITY_BITRATE_H264_STANDARD |
||||
|
- VIDEOQUALITY_BITRATE_H264_HIGH |
||||
|
- VIDEOQUALITY_BITRATE_VP8_LOW |
||||
|
- VIDEOQUALITY_BITRATE_VP8_STANDARD |
||||
|
- VIDEOQUALITY_BITRATE_VP8_HIGH |
||||
|
- VIDEOQUALITY_BITRATE_VP9_LOW |
||||
|
- VIDEOQUALITY_BITRATE_VP9_STANDARD |
||||
|
- VIDEOQUALITY_BITRATE_VP9_HIGH |
||||
|
- VIDEOQUALITY_ENFORCE_PREFERRED_CODEC |
||||
|
- VIDEOQUALITY_PREFERRED_CODEC |
||||
|
- XMPP_AUTH_DOMAIN |
||||
|
- XMPP_BOSH_URL_BASE |
||||
|
- XMPP_DOMAIN |
||||
|
- XMPP_GUEST_DOMAIN |
||||
|
- XMPP_MUC_DOMAIN |
||||
|
- XMPP_RECORDER_DOMAIN |
||||
|
networks: |
||||
|
meet.jitsi: |
||||
|
|
||||
|
# XMPP server |
||||
|
prosody: |
||||
|
image: jitsi/prosody:stable-6726 |
||||
|
container_name: jitsiprosody |
||||
|
restart: ${RESTART_POLICY} |
||||
|
#expose: |
||||
|
# - '5222' |
||||
|
# - '5347' |
||||
|
# - '5280' |
||||
|
volumes: |
||||
|
- ${CONFIG}/prosody/config:/config:Z |
||||
|
- ${CONFIG}/prosody/prosody-plugins-custom:/prosody-plugins-custom:Z |
||||
|
environment: |
||||
|
- AUTH_TYPE |
||||
|
- DISABLE_POLLS |
||||
|
- ENABLE_AUTH |
||||
|
- ENABLE_AV_MODERATION |
||||
|
- ENABLE_BREAKOUT_ROOMS |
||||
|
- ENABLE_GUESTS |
||||
|
- ENABLE_LOBBY |
||||
|
- ENABLE_XMPP_WEBSOCKET |
||||
|
- GLOBAL_CONFIG |
||||
|
- GLOBAL_MODULES |
||||
|
- JIBRI_RECORDER_USER |
||||
|
- JIBRI_RECORDER_PASSWORD |
||||
|
- JIBRI_XMPP_USER |
||||
|
- JIBRI_XMPP_PASSWORD |
||||
|
- JICOFO_AUTH_USER |
||||
|
- JICOFO_AUTH_PASSWORD |
||||
|
- JICOFO_COMPONENT_SECRET |
||||
|
- JIGASI_XMPP_USER |
||||
|
- JIGASI_XMPP_PASSWORD |
||||
|
- JVB_AUTH_USER |
||||
|
- JVB_AUTH_PASSWORD |
||||
|
- JWT_APP_ID |
||||
|
- JWT_APP_SECRET |
||||
|
- JWT_ACCEPTED_ISSUERS |
||||
|
- JWT_ACCEPTED_AUDIENCES |
||||
|
- JWT_ASAP_KEYSERVER |
||||
|
- JWT_ALLOW_EMPTY |
||||
|
- JWT_AUTH_TYPE |
||||
|
- JWT_TOKEN_AUTH_MODULE |
||||
|
- LOG_LEVEL |
||||
|
- LDAP_AUTH_METHOD |
||||
|
- LDAP_BASE |
||||
|
- LDAP_BINDDN |
||||
|
- LDAP_BINDPW |
||||
|
- LDAP_FILTER |
||||
|
- LDAP_VERSION |
||||
|
- LDAP_TLS_CIPHERS |
||||
|
- LDAP_TLS_CHECK_PEER |
||||
|
- LDAP_TLS_CACERT_FILE |
||||
|
- LDAP_TLS_CACERT_DIR |
||||
|
- LDAP_START_TLS |
||||
|
- LDAP_URL |
||||
|
- LDAP_USE_TLS |
||||
|
- PUBLIC_URL |
||||
|
- TURN_CREDENTIALS |
||||
|
- TURN_HOST |
||||
|
- TURNS_HOST |
||||
|
- TURN_PORT |
||||
|
- TURNS_PORT |
||||
|
- TZ |
||||
|
- XMPP_DOMAIN |
||||
|
- XMPP_AUTH_DOMAIN |
||||
|
- XMPP_GUEST_DOMAIN |
||||
|
- XMPP_MUC_DOMAIN |
||||
|
- XMPP_INTERNAL_MUC_DOMAIN |
||||
|
- XMPP_MODULES |
||||
|
- XMPP_MUC_MODULES |
||||
|
- XMPP_INTERNAL_MUC_MODULES |
||||
|
- XMPP_RECORDER_DOMAIN |
||||
|
- XMPP_CROSS_DOMAIN |
||||
|
networks: |
||||
|
meet.jitsi: |
||||
|
aliases: |
||||
|
- ${XMPP_SERVER} |
||||
|
|
||||
|
# Focus component |
||||
|
jicofo: |
||||
|
image: jitsi/jicofo:stable-6726 |
||||
|
container_name: jitsijicofo |
||||
|
restart: ${RESTART_POLICY} |
||||
|
volumes: |
||||
|
- ${CONFIG}/jicofo:/config:Z |
||||
|
environment: |
||||
|
- AUTH_TYPE |
||||
|
- BRIDGE_AVG_PARTICIPANT_STRESS |
||||
|
- BRIDGE_STRESS_THRESHOLD |
||||
|
- ENABLE_AUTH |
||||
|
- ENABLE_AUTO_OWNER |
||||
|
- ENABLE_CODEC_VP8 |
||||
|
- ENABLE_CODEC_VP9 |
||||
|
- ENABLE_CODEC_H264 |
||||
|
- ENABLE_OCTO |
||||
|
- ENABLE_RECORDING |
||||
|
- ENABLE_SCTP |
||||
|
- ENABLE_AUTO_LOGIN |
||||
|
- JICOFO_AUTH_USER |
||||
|
- JICOFO_AUTH_PASSWORD |
||||
|
- JICOFO_ENABLE_BRIDGE_HEALTH_CHECKS |
||||
|
- JICOFO_CONF_INITIAL_PARTICIPANT_WAIT_TIMEOUT |
||||
|
- JICOFO_CONF_SINGLE_PARTICIPANT_TIMEOUT |
||||
|
- JICOFO_ENABLE_HEALTH_CHECKS |
||||
|
- JICOFO_SHORT_ID |
||||
|
- JICOFO_RESERVATION_ENABLED |
||||
|
- JICOFO_RESERVATION_REST_BASE_URL |
||||
|
- JIBRI_BREWERY_MUC |
||||
|
- JIBRI_REQUEST_RETRIES |
||||
|
- JIBRI_PENDING_TIMEOUT |
||||
|
- JIGASI_BREWERY_MUC |
||||
|
- JIGASI_SIP_URI |
||||
|
- JVB_BREWERY_MUC |
||||
|
- MAX_BRIDGE_PARTICIPANTS |
||||
|
- OCTO_BRIDGE_SELECTION_STRATEGY |
||||
|
- SENTRY_DSN="${JICOFO_SENTRY_DSN:-0}" |
||||
|
- SENTRY_ENVIRONMENT |
||||
|
- SENTRY_RELEASE |
||||
|
- TZ |
||||
|
- XMPP_DOMAIN |
||||
|
- XMPP_AUTH_DOMAIN |
||||
|
- XMPP_INTERNAL_MUC_DOMAIN |
||||
|
- XMPP_MUC_DOMAIN |
||||
|
- XMPP_SERVER |
||||
|
depends_on: |
||||
|
- prosody |
||||
|
networks: |
||||
|
meet.jitsi: |
||||
|
|
||||
|
# Video bridge |
||||
|
jvb: |
||||
|
image: jitsi/jvb:stable-6726 |
||||
|
container_name: jitsijvb |
||||
|
restart: ${RESTART_POLICY} |
||||
|
#ports: |
||||
|
# - '${JVB_PORT}:${JVB_PORT}/udp' |
||||
|
# - '${JVB_TCP_PORT}:${JVB_TCP_PORT}' |
||||
|
volumes: |
||||
|
- ${CONFIG}/jvb:/config:Z |
||||
|
environment: |
||||
|
- DOCKER_HOST_ADDRESS |
||||
|
- ENABLE_COLIBRI_WEBSOCKET |
||||
|
- ENABLE_OCTO |
||||
|
- JVB_AUTH_USER |
||||
|
- JVB_AUTH_PASSWORD |
||||
|
- JVB_BREWERY_MUC |
||||
|
- JVB_PORT |
||||
|
- JVB_TCP_HARVESTER_DISABLED |
||||
|
- JVB_TCP_PORT |
||||
|
- JVB_TCP_MAPPED_PORT |
||||
|
- JVB_STUN_SERVERS |
||||
|
- JVB_OCTO_BIND_ADDRESS |
||||
|
- JVB_OCTO_PUBLIC_ADDRESS |
||||
|
- JVB_OCTO_BIND_PORT |
||||
|
- JVB_OCTO_REGION |
||||
|
- JVB_WS_DOMAIN |
||||
|
- JVB_WS_SERVER_ID |
||||
|
- PUBLIC_URL |
||||
|
- SENTRY_DSN="${JVB_SENTRY_DSN:-0}" |
||||
|
- SENTRY_ENVIRONMENT |
||||
|
- SENTRY_RELEASE |
||||
|
- COLIBRI_REST_ENABLED |
||||
|
- SHUTDOWN_REST_ENABLED |
||||
|
- TZ |
||||
|
- XMPP_AUTH_DOMAIN |
||||
|
- XMPP_INTERNAL_MUC_DOMAIN |
||||
|
- XMPP_SERVER |
||||
|
depends_on: |
||||
|
- prosody |
||||
|
networks: |
||||
|
meet.jitsi: |
||||
|
|
||||
|
|
||||
|
# Custom network so all services can communicate using a FQDN |
||||
|
networks: |
||||
|
meet.jitsi: |
||||
@ -0,0 +1,412 @@ |
|||||
|
# shellcheck disable=SC2034 |
||||
|
|
||||
|
# Security |
||||
|
# |
||||
|
# Set these to strong passwords to avoid intruders from impersonating a service account |
||||
|
# The service(s) won't start unless these are specified |
||||
|
# Running ./gen-passwords.sh will update .env with strong passwords |
||||
|
# You may skip the Jigasi and Jibri passwords if you are not using those |
||||
|
# DO NOT reuse passwords |
||||
|
# |
||||
|
|
||||
|
# XMPP password for Jicofo client connections |
||||
|
JICOFO_AUTH_PASSWORD=284e5595787065de58f350ab54c151be |
||||
|
|
||||
|
# XMPP password for JVB client connections |
||||
|
JVB_AUTH_PASSWORD=fef77dc4580183b366dbe65357538716 |
||||
|
|
||||
|
# XMPP password for Jigasi MUC client connections |
||||
|
JIGASI_XMPP_PASSWORD=d41efde399375d50871f28aa9a078b3e |
||||
|
|
||||
|
# XMPP recorder password for Jibri client connections |
||||
|
JIBRI_RECORDER_PASSWORD=f785cb7d5d9816ff5f9ca781fd544ee8 |
||||
|
|
||||
|
# XMPP password for Jibri client connections |
||||
|
JIBRI_XMPP_PASSWORD=cdbea33c1a65a55ffb4a080a5cb1a9f7 |
||||
|
|
||||
|
|
||||
|
# |
||||
|
# Basic configuration options |
||||
|
# |
||||
|
|
||||
|
# Directory where all configuration will be stored |
||||
|
#CONFIG=/data/appl/ok/gitversion/examples-services/tmp-test/jitsi/docker-jitsi-meet-stable-6726/.jitsi-meet-cfg/.jitsi-meet-cfg |
||||
|
CONFIG=./.jitsi-meet-cfg |
||||
|
#CONFIG=.jitsi-meet-cfg |
||||
|
|
||||
|
# Exposed HTTP port |
||||
|
HTTP_PORT=9083 |
||||
|
|
||||
|
# Exposed HTTPS port |
||||
|
HTTPS_PORT=9043 |
||||
|
|
||||
|
# System time zone |
||||
|
TZ=UTC |
||||
|
|
||||
|
# Public URL for the web service (required) |
||||
|
#PUBLIC_URL=https://meet.example.com |
||||
|
|
||||
|
# IP address of the Docker host |
||||
|
# See the "Running behind NAT or on a LAN environment" section in the Handbook: |
||||
|
# https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker#running-behind-nat-or-on-a-lan-environment |
||||
|
#DOCKER_HOST_ADDRESS=192.168.1.1 |
||||
|
|
||||
|
# Control whether the lobby feature should be enabled or not |
||||
|
#ENABLE_LOBBY=1 |
||||
|
|
||||
|
# Control whether the A/V moderation should be enabled or not |
||||
|
#ENABLE_AV_MODERATION=1 |
||||
|
|
||||
|
# Show a prejoin page before entering a conference |
||||
|
#ENABLE_PREJOIN_PAGE=0 |
||||
|
|
||||
|
# Enable the welcome page |
||||
|
#ENABLE_WELCOME_PAGE=1 |
||||
|
|
||||
|
# Enable the close page |
||||
|
#ENABLE_CLOSE_PAGE=0 |
||||
|
|
||||
|
# Disable measuring of audio levels |
||||
|
#DISABLE_AUDIO_LEVELS=0 |
||||
|
|
||||
|
# Enable noisy mic detection |
||||
|
#ENABLE_NOISY_MIC_DETECTION=1 |
||||
|
|
||||
|
# |
||||
|
# Let's Encrypt configuration |
||||
|
# |
||||
|
|
||||
|
# Enable Let's Encrypt certificate generation |
||||
|
#ENABLE_LETSENCRYPT=1 |
||||
|
|
||||
|
# Domain for which to generate the certificate |
||||
|
#LETSENCRYPT_DOMAIN=meet.example.com |
||||
|
|
||||
|
# E-Mail for receiving important account notifications (mandatory) |
||||
|
#LETSENCRYPT_EMAIL=alice@atlanta.net |
||||
|
|
||||
|
# Use the staging server (for avoiding rate limits while testing) |
||||
|
#LETSENCRYPT_USE_STAGING=1 |
||||
|
|
||||
|
|
||||
|
# |
||||
|
# Etherpad integration (for document sharing) |
||||
|
# |
||||
|
|
||||
|
# Set etherpad-lite URL in docker local network (uncomment to enable) |
||||
|
#ETHERPAD_URL_BASE=http://etherpad.meet.jitsi:9001 |
||||
|
|
||||
|
# Set etherpad-lite public URL (uncomment to enable) |
||||
|
#ETHERPAD_PUBLIC_URL=https://etherpad.my.domain |
||||
|
|
||||
|
# Name your etherpad instance! |
||||
|
ETHERPAD_TITLE=Video Chat |
||||
|
|
||||
|
# The default text of a pad |
||||
|
ETHERPAD_DEFAULT_PAD_TEXT="Welcome to Web Chat!\n\n" |
||||
|
|
||||
|
# Name of the skin for etherpad |
||||
|
ETHERPAD_SKIN_NAME=colibris |
||||
|
|
||||
|
# Skin variants for etherpad |
||||
|
ETHERPAD_SKIN_VARIANTS="super-light-toolbar super-light-editor light-background full-width-editor" |
||||
|
|
||||
|
|
||||
|
# |
||||
|
# Basic Jigasi configuration options (needed for SIP gateway support) |
||||
|
# |
||||
|
|
||||
|
# SIP URI for incoming / outgoing calls |
||||
|
#JIGASI_SIP_URI=test@sip2sip.info |
||||
|
|
||||
|
# Password for the specified SIP account as a clear text |
||||
|
#JIGASI_SIP_PASSWORD=passw0rd |
||||
|
|
||||
|
# SIP server (use the SIP account domain if in doubt) |
||||
|
#JIGASI_SIP_SERVER=sip2sip.info |
||||
|
|
||||
|
# SIP server port |
||||
|
#JIGASI_SIP_PORT=5060 |
||||
|
|
||||
|
# SIP server transport |
||||
|
#JIGASI_SIP_TRANSPORT=UDP |
||||
|
|
||||
|
# |
||||
|
# Authentication configuration (see handbook for details) |
||||
|
# |
||||
|
|
||||
|
# Enable authentication |
||||
|
#ENABLE_AUTH=1 |
||||
|
|
||||
|
# Enable guest access |
||||
|
#ENABLE_GUESTS=1 |
||||
|
|
||||
|
# Select authentication type: internal, jwt or ldap |
||||
|
#AUTH_TYPE=internal |
||||
|
|
||||
|
# JWT authentication |
||||
|
# |
||||
|
|
||||
|
# Application identifier |
||||
|
#JWT_APP_ID=my_jitsi_app_id |
||||
|
|
||||
|
# Application secret known only to your token generator |
||||
|
#JWT_APP_SECRET=my_jitsi_app_secret |
||||
|
|
||||
|
# (Optional) Set asap_accepted_issuers as a comma separated list |
||||
|
#JWT_ACCEPTED_ISSUERS=my_web_client,my_app_client |
||||
|
|
||||
|
# (Optional) Set asap_accepted_audiences as a comma separated list |
||||
|
#JWT_ACCEPTED_AUDIENCES=my_server1,my_server2 |
||||
|
|
||||
|
|
||||
|
# LDAP authentication (for more information see the Cyrus SASL saslauthd.conf man page) |
||||
|
# |
||||
|
|
||||
|
# LDAP url for connection |
||||
|
#LDAP_URL=ldaps://ldap.domain.com/ |
||||
|
|
||||
|
# LDAP base DN. Can be empty |
||||
|
#LDAP_BASE=DC=example,DC=domain,DC=com |
||||
|
|
||||
|
# LDAP user DN. Do not specify this parameter for the anonymous bind |
||||
|
#LDAP_BINDDN=CN=binduser,OU=users,DC=example,DC=domain,DC=com |
||||
|
|
||||
|
# LDAP user password. Do not specify this parameter for the anonymous bind |
||||
|
#LDAP_BINDPW=LdapUserPassw0rd |
||||
|
|
||||
|
# LDAP filter. Tokens example: |
||||
|
# %1-9 - if the input key is user@mail.domain.com, then %1 is com, %2 is domain and %3 is mail |
||||
|
# %s - %s is replaced by the complete service string |
||||
|
# %r - %r is replaced by the complete realm string |
||||
|
#LDAP_FILTER=(sAMAccountName=%u) |
||||
|
|
||||
|
# LDAP authentication method |
||||
|
#LDAP_AUTH_METHOD=bind |
||||
|
|
||||
|
# LDAP version |
||||
|
#LDAP_VERSION=3 |
||||
|
|
||||
|
# LDAP TLS using |
||||
|
#LDAP_USE_TLS=1 |
||||
|
|
||||
|
# List of SSL/TLS ciphers to allow |
||||
|
#LDAP_TLS_CIPHERS=SECURE256:SECURE128:!AES-128-CBC:!ARCFOUR-128:!CAMELLIA-128-CBC:!3DES-CBC:!CAMELLIA-128-CBC |
||||
|
|
||||
|
# Require and verify server certificate |
||||
|
#LDAP_TLS_CHECK_PEER=1 |
||||
|
|
||||
|
# Path to CA cert file. Used when server certificate verify is enabled |
||||
|
#LDAP_TLS_CACERT_FILE=/etc/ssl/certs/ca-certificates.crt |
||||
|
|
||||
|
# Path to CA certs directory. Used when server certificate verify is enabled |
||||
|
#LDAP_TLS_CACERT_DIR=/etc/ssl/certs |
||||
|
|
||||
|
# Wether to use starttls, implies LDAPv3 and requires ldap:// instead of ldaps:// |
||||
|
# LDAP_START_TLS=1 |
||||
|
|
||||
|
|
||||
|
# |
||||
|
# Advanced configuration options (you generally don't need to change these) |
||||
|
# |
||||
|
|
||||
|
# Internal XMPP domain |
||||
|
XMPP_DOMAIN=meet.jitsi |
||||
|
|
||||
|
# Internal XMPP server |
||||
|
XMPP_SERVER=jitsiprosody.microservice-jitsimeet_meet.jitsi |
||||
|
|
||||
|
# Internal XMPP server URL |
||||
|
XMPP_BOSH_URL_BASE=http://jitsiprosody.microservice-jitsimeet_meet.jitsi:5280 |
||||
|
|
||||
|
# Internal XMPP domain for authenticated services |
||||
|
XMPP_AUTH_DOMAIN=auth.meet.jitsi |
||||
|
|
||||
|
# XMPP domain for the MUC |
||||
|
XMPP_MUC_DOMAIN=muc.meet.jitsi |
||||
|
|
||||
|
# XMPP domain for the internal MUC used for jibri, jigasi and jvb pools |
||||
|
XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi |
||||
|
|
||||
|
# XMPP domain for unauthenticated users |
||||
|
XMPP_GUEST_DOMAIN=guest.meet.jitsi |
||||
|
|
||||
|
# Comma separated list of domains for cross domain policy or "true" to allow all |
||||
|
# The PUBLIC_URL is always allowed |
||||
|
#XMPP_CROSS_DOMAIN=true |
||||
|
|
||||
|
# Custom Prosody modules for XMPP_DOMAIN (comma separated) |
||||
|
XMPP_MODULES= |
||||
|
|
||||
|
# Custom Prosody modules for MUC component (comma separated) |
||||
|
XMPP_MUC_MODULES= |
||||
|
|
||||
|
# Custom Prosody modules for internal MUC component (comma separated) |
||||
|
XMPP_INTERNAL_MUC_MODULES= |
||||
|
|
||||
|
# MUC for the JVB pool |
||||
|
JVB_BREWERY_MUC=jvbbrewery |
||||
|
|
||||
|
# XMPP user for JVB client connections |
||||
|
JVB_AUTH_USER=jvb |
||||
|
|
||||
|
# STUN servers used to discover the server's public IP |
||||
|
JVB_STUN_SERVERS=meet-jit-si-turnrelay.jitsi.net:443 |
||||
|
|
||||
|
# Media port for the Jitsi Videobridge |
||||
|
JVB_PORT=10000 |
||||
|
|
||||
|
# TCP Fallback for Jitsi Videobridge for when UDP isn't available |
||||
|
JVB_TCP_HARVESTER_DISABLED=true |
||||
|
JVB_TCP_PORT=4443 |
||||
|
JVB_TCP_MAPPED_PORT=4443 |
||||
|
|
||||
|
# XMPP user for Jicofo client connections. |
||||
|
# NOTE: this option doesn't currently work due to a bug |
||||
|
JICOFO_AUTH_USER=focus |
||||
|
|
||||
|
# Base URL of Jicofo's reservation REST API |
||||
|
#JICOFO_RESERVATION_REST_BASE_URL=http://reservation.example.com |
||||
|
|
||||
|
# Enable Jicofo's health check REST API (http://<jicofo_base_url>:8888/about/health) |
||||
|
#JICOFO_ENABLE_HEALTH_CHECKS=true |
||||
|
|
||||
|
# XMPP user for Jigasi MUC client connections |
||||
|
JIGASI_XMPP_USER=jigasi |
||||
|
|
||||
|
# MUC name for the Jigasi pool |
||||
|
JIGASI_BREWERY_MUC=jigasibrewery |
||||
|
|
||||
|
# Minimum port for media used by Jigasi |
||||
|
JIGASI_PORT_MIN=20000 |
||||
|
|
||||
|
# Maximum port for media used by Jigasi |
||||
|
JIGASI_PORT_MAX=20050 |
||||
|
|
||||
|
# Enable SDES srtp |
||||
|
#JIGASI_ENABLE_SDES_SRTP=1 |
||||
|
|
||||
|
# Keepalive method |
||||
|
#JIGASI_SIP_KEEP_ALIVE_METHOD=OPTIONS |
||||
|
|
||||
|
# Health-check extension |
||||
|
#JIGASI_HEALTH_CHECK_SIP_URI=keepalive |
||||
|
|
||||
|
# Health-check interval |
||||
|
#JIGASI_HEALTH_CHECK_INTERVAL=300000 |
||||
|
# |
||||
|
# Enable Jigasi transcription |
||||
|
#ENABLE_TRANSCRIPTIONS=1 |
||||
|
|
||||
|
# Jigasi will record audio when transcriber is on [default: false] |
||||
|
#JIGASI_TRANSCRIBER_RECORD_AUDIO=true |
||||
|
|
||||
|
# Jigasi will send transcribed text to the chat when transcriber is on [default: false] |
||||
|
#JIGASI_TRANSCRIBER_SEND_TXT=true |
||||
|
|
||||
|
# Jigasi will post an url to the chat with transcription file [default: false] |
||||
|
#JIGASI_TRANSCRIBER_ADVERTISE_URL=true |
||||
|
|
||||
|
# Credentials for connect to Cloud Google API from Jigasi |
||||
|
# Please read https://cloud.google.com/text-to-speech/docs/quickstart-protocol |
||||
|
# section "Before you begin" paragraph 1 to 5 |
||||
|
# Copy the values from the json to the related env vars |
||||
|
#GC_PROJECT_ID= |
||||
|
#GC_PRIVATE_KEY_ID= |
||||
|
#GC_PRIVATE_KEY= |
||||
|
#GC_CLIENT_EMAIL= |
||||
|
#GC_CLIENT_ID= |
||||
|
#GC_CLIENT_CERT_URL= |
||||
|
|
||||
|
# Enable recording |
||||
|
#ENABLE_RECORDING=1 |
||||
|
|
||||
|
# XMPP domain for the jibri recorder |
||||
|
XMPP_RECORDER_DOMAIN=recorder.meet.jitsi |
||||
|
|
||||
|
# XMPP recorder user for Jibri client connections |
||||
|
JIBRI_RECORDER_USER=recorder |
||||
|
|
||||
|
# Directory for recordings inside Jibri container |
||||
|
JIBRI_RECORDING_DIR=/config/recordings |
||||
|
|
||||
|
# The finalizing script. Will run after recording is complete |
||||
|
#JIBRI_FINALIZE_RECORDING_SCRIPT_PATH=/config/finalize.sh |
||||
|
|
||||
|
# XMPP user for Jibri client connections |
||||
|
JIBRI_XMPP_USER=jibri |
||||
|
|
||||
|
# MUC name for the Jibri pool |
||||
|
JIBRI_BREWERY_MUC=jibribrewery |
||||
|
|
||||
|
# MUC connection timeout |
||||
|
JIBRI_PENDING_TIMEOUT=90 |
||||
|
|
||||
|
# When jibri gets a request to start a service for a room, the room |
||||
|
# jid will look like: roomName@optional.prefixes.subdomain.xmpp_domain |
||||
|
# We'll build the url for the call by transforming that into: |
||||
|
# https://xmpp_domain/subdomain/roomName |
||||
|
# So if there are any prefixes in the jid (like jitsi meet, which |
||||
|
# has its participants join a muc at conference.xmpp_domain) then |
||||
|
# list that prefix here so it can be stripped out to generate |
||||
|
# the call url correctly |
||||
|
JIBRI_STRIP_DOMAIN_JID=muc |
||||
|
|
||||
|
# Directory for logs inside Jibri container |
||||
|
JIBRI_LOGS_DIR=/config/logs |
||||
|
|
||||
|
# Configure an external TURN server |
||||
|
# TURN_CREDENTIALS=secret |
||||
|
# TURN_HOST=turnserver.example.com |
||||
|
# TURN_PORT=443 |
||||
|
# TURNS_HOST=turnserver.example.com |
||||
|
# TURNS_PORT=443 |
||||
|
|
||||
|
# Disable HTTPS: handle TLS connections outside of this setup |
||||
|
#DISABLE_HTTPS=1 |
||||
|
|
||||
|
# Enable FLoC |
||||
|
# Opt-In to Federated Learning of Cohorts tracking |
||||
|
#ENABLE_FLOC=0 |
||||
|
|
||||
|
# Redirect HTTP traffic to HTTPS |
||||
|
# Necessary for Let's Encrypt, relies on standard HTTPS port (443) |
||||
|
#ENABLE_HTTP_REDIRECT=1 |
||||
|
|
||||
|
# Send a `strict-transport-security` header to force browsers to use |
||||
|
# a secure and trusted connection. Recommended for production use. |
||||
|
# Defaults to 1 (send the header). |
||||
|
# ENABLE_HSTS=1 |
||||
|
|
||||
|
# Enable IPv6 |
||||
|
# Provides means to disable IPv6 in environments that don't support it (get with the times, people!) |
||||
|
#ENABLE_IPV6=1 |
||||
|
|
||||
|
# Container restart policy |
||||
|
# Defaults to unless-stopped |
||||
|
RESTART_POLICY=unless-stopped |
||||
|
|
||||
|
ENABLE_XMPP_WEBSOCKET=0 |
||||
|
#ENABLE_SCTP=1 |
||||
|
#ENABLE_COLIBRI_WEBSOCKET=0 |
||||
|
#ENABLE_XMPP_WEBSOCKET=0 |
||||
|
|
||||
|
# Authenticate using external service or just focus external auth window if there is one already. |
||||
|
# TOKEN_AUTH_URL=https://auth.meet.example.com/{room} |
||||
|
|
||||
|
# Sentry Error Tracking |
||||
|
# Sentry Data Source Name (Endpoint for Sentry project) |
||||
|
# Example: https://public:private@host:port/1 |
||||
|
#JVB_SENTRY_DSN= |
||||
|
#JICOFO_SENTRY_DSN= |
||||
|
#JIGASI_SENTRY_DSN= |
||||
|
|
||||
|
# Optional environment info to filter events |
||||
|
#SENTRY_ENVIRONMENT=production |
||||
|
|
||||
|
# Optional release info to filter events |
||||
|
#SENTRY_RELEASE=1.0.0 |
||||
|
|
||||
|
# Optional properties for shutdown api |
||||
|
#COLIBRI_REST_ENABLED=true |
||||
|
#SHUTDOWN_REST_ENABLED=true |
||||
@ -0,0 +1,19 @@ |
|||||
|
#!/usr/bin/env bash |
||||
|
|
||||
|
function generatePassword() { |
||||
|
openssl rand -hex 16 |
||||
|
} |
||||
|
|
||||
|
JICOFO_AUTH_PASSWORD=$(generatePassword) |
||||
|
JVB_AUTH_PASSWORD=$(generatePassword) |
||||
|
JIGASI_XMPP_PASSWORD=$(generatePassword) |
||||
|
JIBRI_RECORDER_PASSWORD=$(generatePassword) |
||||
|
JIBRI_XMPP_PASSWORD=$(generatePassword) |
||||
|
|
||||
|
sed -i.bak \ |
||||
|
-e "s#JICOFO_AUTH_PASSWORD=.*#JICOFO_AUTH_PASSWORD=${JICOFO_AUTH_PASSWORD}#g" \ |
||||
|
-e "s#JVB_AUTH_PASSWORD=.*#JVB_AUTH_PASSWORD=${JVB_AUTH_PASSWORD}#g" \ |
||||
|
-e "s#JIGASI_XMPP_PASSWORD=.*#JIGASI_XMPP_PASSWORD=${JIGASI_XMPP_PASSWORD}#g" \ |
||||
|
-e "s#JIBRI_RECORDER_PASSWORD=.*#JIBRI_RECORDER_PASSWORD=${JIBRI_RECORDER_PASSWORD}#g" \ |
||||
|
-e "s#JIBRI_XMPP_PASSWORD=.*#JIBRI_XMPP_PASSWORD=${JIBRI_XMPP_PASSWORD}#g" \ |
||||
|
"$(dirname "$0")/.env" |
||||
@ -0,0 +1,34 @@ |
|||||
|
#!/bin/bash |
||||
|
|
||||
|
|
||||
|
SOURCE="${BASH_SOURCE[0]}" |
||||
|
while [ -h "$SOURCE" ]; do # resolve $SOURCE until the file is no longer a symlink |
||||
|
TARGET="$(readlink "$SOURCE")" |
||||
|
if [[ $TARGET == /* ]]; then |
||||
|
SOURCE="$TARGET" |
||||
|
else |
||||
|
DIR="$( dirname "$SOURCE" )" |
||||
|
SOURCE="$DIR/$TARGET" # if $SOURCE was a relative symlink, we need to resolve it relative to the path where the symlink file was located |
||||
|
fi |
||||
|
done |
||||
|
|
||||
|
SRPATH="$( dirname "$SOURCE" )" |
||||
|
SFPATH="$( cd -P "$( dirname "$SOURCE" )" && pwd )" |
||||
|
if [ "$SFPATH" != "$SRPATH" ]; then |
||||
|
RDIR=$SRPATH # relativ path directory |
||||
|
fi |
||||
|
|
||||
|
cwdir=$PWD |
||||
|
wdir=$SFPATH |
||||
|
|
||||
|
|
||||
|
docker-compose down |
||||
|
docker-compose rm |
||||
|
docker container rm jitsiprosody jitsiweb jitsijicofo jitsijvb |
||||
|
docker-compose pull |
||||
|
cd $wdir |
||||
|
cp -f env .env |
||||
|
./create-config.sh |
||||
|
./gen-passwords.sh |
||||
|
cd $cwdir |
||||
|
docker-compose up -d |
||||
@ -0,0 +1,5 @@ |
|||||
|
#!/bin/bash |
||||
|
|
||||
|
docker-compose down |
||||
|
docker-compose rm |
||||
|
docker container rm jitsiprosody jitsiweb jitsijicofo jitsijvb |
||||
Loading…
Reference in new issue