docker-jitsi-meet/prosody/rootfs/defaults/saslauthd.conf

{{ $AUTH_TYPE := .Env.AUTH_TYPE | default "internal" -}}
{{ $PROSODY_AUTH_TYPE := .Env.PROSODY_AUTH_TYPE | default $AUTH_TYPE }}
{{ $XMPP_DOMAIN := .Env.XMPP_DOMAIN | default "meet.jitsi" -}}

{{ if eq $PROSODY_AUTH_TYPE "ldap" }}
ldap_servers: {{ .Env.LDAP_URL }}
ldap_search_base: {{ .Env.LDAP_BASE }}
{{ if .Env.LDAP_BINDDN | default "" }}
ldap_bind_dn: {{ .Env.LDAP_BINDDN }}
ldap_bind_pw: {{ .Env.LDAP_BINDPW }}
{{ end }}
ldap_filter: {{ .Env.LDAP_FILTER | default "uid=%u" }}
ldap_version: {{ .Env.LDAP_VERSION | default "3" }}
ldap_auth_method: {{ .Env.LDAP_AUTH_METHOD | default "bind" }}
  {{ if .Env.LDAP_USE_TLS | default "0" | toBool }}
ldap_tls_key: /config/certs/{{ $XMPP_DOMAIN }}.key
ldap_tls_cert: /config/certs/{{ $XMPP_DOMAIN }}.crt
    {{ if .Env.LDAP_TLS_CHECK_PEER | default "0" | toBool }}
ldap_tls_check_peer: yes
ldap_tls_cacert_file: {{ .Env.LDAP_TLS_CACERT_FILE | default "/etc/ssl/certs/ca-certificates.crt" }}
ldap_tls_cacert_dir: {{ .Env.LDAP_TLS_CACERT_DIR | default "/etc/ssl/certs" }}
    {{ end }}
    {{ if .Env.LDAP_TLS_CIPHERS }}
ldap_tls_ciphers: {{ .Env.LDAP_TLS_CIPHERS }}
    {{ end }}
  {{ end }}
{{ end }}
{{ if .Env.LDAP_START_TLS | default "0" | toBool }}
ldap_start_tls: yes
{{ end }}
jicofo, prosody: allow to set different AUTH_TYPE 1 year ago			`{{ $AUTH_TYPE := .Env.AUTH_TYPE \| default "internal" -}}`
			`{{ $PROSODY_AUTH_TYPE := .Env.PROSODY_AUTH_TYPE \| default $AUTH_TYPE }}`
config: simplify configuration Use default values everywhere so they don't need to be specified in the .env file. This makes the default .env file much smaller (the larger config options are documented in the handbook) and should make it easier to port the setup to runtimes other than Docker Compose. 3 years ago			`{{ $XMPP_DOMAIN := .Env.XMPP_DOMAIN \| default "meet.jitsi" -}}`

jicofo, prosody: allow to set different AUTH_TYPE 1 year ago			`{{ if eq $PROSODY_AUTH_TYPE "ldap" }}`
prosody: add LDAP authentication via SASL mechanism 6 years ago			`ldap_servers: {{ .Env.LDAP_URL }}`
			`ldap_search_base: {{ .Env.LDAP_BASE }}`
prosody: fix ldap config template 5 years ago			`{{ if .Env.LDAP_BINDDN \| default "" }}`
prosody: add LDAP authentication via SASL mechanism 6 years ago			`ldap_bind_dn: {{ .Env.LDAP_BINDDN }}`
			`ldap_bind_pw: {{ .Env.LDAP_BINDPW }}`
ldap: fix anonymous binds Before, ldap_bind_dn: <novalue> ldab_bind_pw: <novalue> was inserted into the saslauthd.conf, which made anonymous binds impossible. 5 years ago			`{{ end }}`
prosody: add LDAP authentication via SASL mechanism 6 years ago			`ldap_filter: {{ .Env.LDAP_FILTER \| default "uid=%u" }}`
			`ldap_version: {{ .Env.LDAP_VERSION \| default "3" }}`
			`ldap_auth_method: {{ .Env.LDAP_AUTH_METHOD \| default "bind" }}`
			`{{ if .Env.LDAP_USE_TLS \| default "0" \| toBool }}`
config: simplify configuration Use default values everywhere so they don't need to be specified in the .env file. This makes the default .env file much smaller (the larger config options are documented in the handbook) and should make it easier to port the setup to runtimes other than Docker Compose. 3 years ago			`ldap_tls_key: /config/certs/{{ $XMPP_DOMAIN }}.key`
			`ldap_tls_cert: /config/certs/{{ $XMPP_DOMAIN }}.crt`
prosody: add LDAP authentication via SASL mechanism 6 years ago			`{{ if .Env.LDAP_TLS_CHECK_PEER \| default "0" \| toBool }}`
			`ldap_tls_check_peer: yes`
			`ldap_tls_cacert_file: {{ .Env.LDAP_TLS_CACERT_FILE \| default "/etc/ssl/certs/ca-certificates.crt" }}`
			`ldap_tls_cacert_dir: {{ .Env.LDAP_TLS_CACERT_DIR \| default "/etc/ssl/certs" }}`
			`{{ end }}`
			`{{ if .Env.LDAP_TLS_CIPHERS }}`
			`ldap_tls_ciphers: {{ .Env.LDAP_TLS_CIPHERS }}`
			`{{ end }}`
			`{{ end }}`
			`{{ end }}`
ldap: add option for ldap starttls support 5 years ago			`{{ if .Env.LDAP_START_TLS \| default "0" \| toBool }}`
			`ldap_start_tls: yes`
			`{{ end }}`