From 0177765f2dfb7c54afa33158d5e25e8f3bcefe4d Mon Sep 17 00:00:00 2001
From: Johannes Nohl <lab@nohl.eu>
Date: Tue, 28 Apr 2020 10:52:57 +0200
Subject: [PATCH] misc: fix config volumes to work with SELinux

Fixes: #472
---
 docker-compose.yml | 14 +++++++-------
 jibri.yml          |  2 +-
 jigasi.yml         |  4 ++--
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 63b7249..0d3091f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -9,9 +9,9 @@ services:
             - '${HTTP_PORT}:80'
             - '${HTTPS_PORT}:443'
         volumes:
-            - ${CONFIG}/web:/config
-            - ${CONFIG}/web/letsencrypt:/etc/letsencrypt
-            - ${CONFIG}/transcripts:/usr/share/jitsi-meet/transcripts
+            - ${CONFIG}/web:/config:Z
+            - ${CONFIG}/web/letsencrypt:/etc/letsencrypt:Z
+            - ${CONFIG}/transcripts:/usr/share/jitsi-meet/transcripts:Z
         environment:
             - ENABLE_AUTH
             - ENABLE_GUESTS
@@ -52,8 +52,8 @@ services:
             - '5347'
             - '5280'
         volumes:
-            - ${CONFIG}/prosody/config:/config
-            - ${CONFIG}/prosody/prosody-plugins-custom:/prosody-plugins-custom
+            - ${CONFIG}/prosody/config:/config:Z
+            - ${CONFIG}/prosody/prosody-plugins-custom:/prosody-plugins-custom:Z
         environment:
             - AUTH_TYPE
             - ENABLE_AUTH
@@ -113,7 +113,7 @@ services:
         image: jitsi/jicofo
         restart: ${RESTART_POLICY}
         volumes:
-            - ${CONFIG}/jicofo:/config
+            - ${CONFIG}/jicofo:/config:Z
         environment:
             - ENABLE_AUTH
             - XMPP_DOMAIN
@@ -143,7 +143,7 @@ services:
             - '${JVB_PORT}:${JVB_PORT}/udp'
             - '${JVB_TCP_MAPPED_PORT}:${JVB_TCP_PORT}'
         volumes:
-            - ${CONFIG}/jvb:/config
+            - ${CONFIG}/jvb:/config:Z
         environment:
             - DOCKER_HOST_ADDRESS
             - XMPP_AUTH_DOMAIN
diff --git a/jibri.yml b/jibri.yml
index 806532f..38fdd84 100644
--- a/jibri.yml
+++ b/jibri.yml
@@ -5,7 +5,7 @@ services:
         image: jitsi/jibri
         restart: ${RESTART_POLICY}
         volumes:
-            - ${CONFIG}/jibri:/config
+            - ${CONFIG}/jibri:/config:Z
             - /dev/shm:/dev/shm
         cap_add:
             - SYS_ADMIN
diff --git a/jigasi.yml b/jigasi.yml
index c36fc17..c6de315 100644
--- a/jigasi.yml
+++ b/jigasi.yml
@@ -8,8 +8,8 @@ services:
         ports:
             - '${JIGASI_PORT_MIN}-${JIGASI_PORT_MAX}:${JIGASI_PORT_MIN}-${JIGASI_PORT_MAX}/udp'
         volumes:
-            - ${CONFIG}/jigasi:/config
-            - ${CONFIG}/transcripts:/tmp/transcripts
+            - ${CONFIG}/jigasi:/config:Z
+            - ${CONFIG}/transcripts:/tmp/transcripts:Z
         environment:
             - ENABLE_AUTH
             - XMPP_AUTH_DOMAIN