|
|
|
@ -1,48 +1,52 @@ |
|
|
|
|
{{ $ENABLE_AUTH := .Env.ENABLE_AUTH | default "0" | toBool }} |
|
|
|
|
{{ $ENABLE_AUTH := .Env.ENABLE_AUTH | default "0" | toBool -}} |
|
|
|
|
{{ $ENABLE_GUEST_DOMAIN := and $ENABLE_AUTH (.Env.ENABLE_GUESTS | default "0" | toBool)}} |
|
|
|
|
{{ $ENABLE_RECORDING := .Env.ENABLE_RECORDING | default "0" | toBool }} |
|
|
|
|
{{ $AUTH_TYPE := .Env.AUTH_TYPE | default "internal" }} |
|
|
|
|
{{ $ENABLE_RECORDING := .Env.ENABLE_RECORDING | default "0" | toBool -}} |
|
|
|
|
{{ $AUTH_TYPE := .Env.AUTH_TYPE | default "internal" -}} |
|
|
|
|
{{ $JIBRI_XMPP_USER := .Env.JIBRI_XMPP_USER | default "jibri" -}} |
|
|
|
|
{{ $JIGASI_XMPP_USER := .Env.JIGASI_XMPP_USER | default "jigasi" -}} |
|
|
|
|
{{ $JVB_AUTH_USER := .Env.JVB_AUTH_USER | default "jvb" -}} |
|
|
|
|
{{ $JWT_ASAP_KEYSERVER := .Env.JWT_ASAP_KEYSERVER | default "" }} |
|
|
|
|
{{ $JWT_ALLOW_EMPTY := .Env.JWT_ALLOW_EMPTY | default "0" | toBool }} |
|
|
|
|
{{ $JWT_AUTH_TYPE := .Env.JWT_AUTH_TYPE | default "token" }} |
|
|
|
|
{{ $JWT_ASAP_KEYSERVER := .Env.JWT_ASAP_KEYSERVER | default "" -}} |
|
|
|
|
{{ $JWT_ALLOW_EMPTY := .Env.JWT_ALLOW_EMPTY | default "0" | toBool -}} |
|
|
|
|
{{ $JWT_AUTH_TYPE := .Env.JWT_AUTH_TYPE | default "token" -}} |
|
|
|
|
{{ $JWT_ENABLE_DOMAIN_VERIFICATION := .Env.JWT_ENABLE_DOMAIN_VERIFICATION | default "false" | toBool -}} |
|
|
|
|
{{ $MATRIX_UVS_ISSUER := .Env.MATRIX_UVS_ISSUER | default "issuer" }} |
|
|
|
|
{{ $MATRIX_UVS_SYNC_POWER_LEVELS := .Env.MATRIX_UVS_SYNC_POWER_LEVELS | default "0" | toBool }} |
|
|
|
|
{{ $JWT_TOKEN_AUTH_MODULE := .Env.JWT_TOKEN_AUTH_MODULE | default "token_verification" }} |
|
|
|
|
{{ $ENABLE_LOBBY := .Env.ENABLE_LOBBY | default "true" | toBool }} |
|
|
|
|
{{ $ENABLE_AV_MODERATION := .Env.ENABLE_AV_MODERATION | default "true" | toBool }} |
|
|
|
|
{{ $ENABLE_BREAKOUT_ROOMS := .Env.ENABLE_BREAKOUT_ROOMS | default "true" | toBool }} |
|
|
|
|
{{ $ENABLE_END_CONFERENCE := .Env.ENABLE_END_CONFERENCE | default "true" | toBool }} |
|
|
|
|
{{ $ENABLE_XMPP_WEBSOCKET := .Env.ENABLE_XMPP_WEBSOCKET | default "1" | toBool }} |
|
|
|
|
{{ $ENABLE_JAAS_COMPONENTS := .Env.ENABLE_JAAS_COMPONENTS | default "0" | toBool }} |
|
|
|
|
{{ $ENABLE_RATE_LIMITS := .Env.PROSODY_ENABLE_RATE_LIMITS | default "0" | toBool }} |
|
|
|
|
{{ $MATRIX_UVS_ISSUER := .Env.MATRIX_UVS_ISSUER | default "issuer" -}} |
|
|
|
|
{{ $MATRIX_UVS_SYNC_POWER_LEVELS := .Env.MATRIX_UVS_SYNC_POWER_LEVELS | default "0" | toBool -}} |
|
|
|
|
{{ $JWT_TOKEN_AUTH_MODULE := .Env.JWT_TOKEN_AUTH_MODULE | default "token_verification" -}} |
|
|
|
|
{{ $ENABLE_LOBBY := .Env.ENABLE_LOBBY | default "true" | toBool -}} |
|
|
|
|
{{ $ENABLE_AV_MODERATION := .Env.ENABLE_AV_MODERATION | default "true" | toBool -}} |
|
|
|
|
{{ $ENABLE_BREAKOUT_ROOMS := .Env.ENABLE_BREAKOUT_ROOMS | default "true" | toBool -}} |
|
|
|
|
{{ $ENABLE_END_CONFERENCE := .Env.ENABLE_END_CONFERENCE | default "true" | toBool -}} |
|
|
|
|
{{ $ENABLE_XMPP_WEBSOCKET := .Env.ENABLE_XMPP_WEBSOCKET | default "1" | toBool -}} |
|
|
|
|
{{ $ENABLE_JAAS_COMPONENTS := .Env.ENABLE_JAAS_COMPONENTS | default "0" | toBool -}} |
|
|
|
|
{{ $ENABLE_RATE_LIMITS := .Env.PROSODY_ENABLE_RATE_LIMITS | default "0" | toBool -}} |
|
|
|
|
{{ $PUBLIC_URL := .Env.PUBLIC_URL | default "https://localhost:8443" -}} |
|
|
|
|
{{ $PUBLIC_URL_DOMAIN := $PUBLIC_URL | trimPrefix "https://" | trimSuffix "/" -}} |
|
|
|
|
{{ $TURN_PORT := .Env.TURN_PORT | default "443" }} |
|
|
|
|
{{ $TURNS_PORT := .Env.TURNS_PORT | default "443" }} |
|
|
|
|
{{ $TURN_HOST := .Env.TURN_HOST | default "" -}} |
|
|
|
|
{{ $TURN_HOSTS := splitList "," $TURN_HOST -}} |
|
|
|
|
{{ $TURN_PORT := .Env.TURN_PORT | default "443" -}} |
|
|
|
|
{{ $TURN_TRANSPORT := .Env.TURN_TRANSPORT | default "tcp" -}} |
|
|
|
|
{{ $TURN_TRANSPORTS := splitList "," $TURN_TRANSPORT -}} |
|
|
|
|
{{ $TURNS_HOST := .Env.TURNS_HOST | default "" -}} |
|
|
|
|
{{ $TURNS_HOSTS := splitList "," $TURNS_HOST -}} |
|
|
|
|
{{ $TURNS_PORT := .Env.TURNS_PORT | default "443" -}} |
|
|
|
|
{{ $XMPP_AUTH_DOMAIN := .Env.XMPP_AUTH_DOMAIN | default "auth.meet.jitsi" -}} |
|
|
|
|
{{ $XMPP_DOMAIN := .Env.XMPP_DOMAIN | default "meet.jitsi" -}} |
|
|
|
|
{{ $XMPP_GUEST_DOMAIN := .Env.XMPP_GUEST_DOMAIN | default "guest.meet.jitsi" -}} |
|
|
|
|
{{ $XMPP_INTERNAL_MUC_DOMAIN := .Env.XMPP_INTERNAL_MUC_DOMAIN | default "internal-muc.meet.jitsi" -}} |
|
|
|
|
{{ $XMPP_MUC_DOMAIN := .Env.XMPP_MUC_DOMAIN | default "muc.meet.jitsi" -}} |
|
|
|
|
{{ $XMPP_MUC_DOMAIN_PREFIX := (split "." $XMPP_MUC_DOMAIN)._0 }} |
|
|
|
|
{{ $XMPP_MUC_DOMAIN_PREFIX := (split "." $XMPP_MUC_DOMAIN)._0 -}} |
|
|
|
|
{{ $XMPP_RECORDER_DOMAIN := .Env.XMPP_RECORDER_DOMAIN | default "recorder.meet.jitsi" -}} |
|
|
|
|
{{ $JIBRI_RECORDER_USER := .Env.JIBRI_RECORDER_USER | default "recorder" -}} |
|
|
|
|
{{ $JIGASI_TRANSCRIBER_USER := .Env.JIGASI_TRANSCRIBER_USER | default "transcriber" -}} |
|
|
|
|
{{ $DISABLE_POLLS := .Env.DISABLE_POLLS | default "false" | toBool -}} |
|
|
|
|
{{ $ENABLE_SUBDOMAINS := .Env.ENABLE_SUBDOMAINS | default "true" | toBool -}} |
|
|
|
|
{{ $PROSODY_RESERVATION_ENABLED := .Env.PROSODY_RESERVATION_ENABLED | default "false" | toBool }} |
|
|
|
|
{{ $PROSODY_RESERVATION_REST_BASE_URL := .Env.PROSODY_RESERVATION_REST_BASE_URL | default "" }} |
|
|
|
|
{{ $RATE_LIMIT_LOGIN_RATE := .Env.PROSODY_RATE_LIMIT_LOGIN_RATE | default "3" }} |
|
|
|
|
{{ $RATE_LIMIT_SESSION_RATE := .Env.PROSODY_RATE_LIMIT_SESSION_RATE | default "200" }} |
|
|
|
|
{{ $RATE_LIMIT_TIMEOUT := .Env.PROSODY_RATE_LIMIT_TIMEOUT | default "60" }} |
|
|
|
|
{{ $RATE_LIMIT_ALLOW_RANGES := .Env.PROSODY_RATE_LIMIT_ALLOW_RANGES | default "10.0.0.0/8" }} |
|
|
|
|
{{ $RATE_LIMIT_CACHE_SIZE := .Env.PROSODY_RATE_LIMIT_CACHE_SIZE | default "10000" }} |
|
|
|
|
{{ $PROSODY_RESERVATION_ENABLED := .Env.PROSODY_RESERVATION_ENABLED | default "false" | toBool -}} |
|
|
|
|
{{ $PROSODY_RESERVATION_REST_BASE_URL := .Env.PROSODY_RESERVATION_REST_BASE_URL | default "" -}} |
|
|
|
|
{{ $RATE_LIMIT_LOGIN_RATE := .Env.PROSODY_RATE_LIMIT_LOGIN_RATE | default "3" -}} |
|
|
|
|
{{ $RATE_LIMIT_SESSION_RATE := .Env.PROSODY_RATE_LIMIT_SESSION_RATE | default "200" -}} |
|
|
|
|
{{ $RATE_LIMIT_TIMEOUT := .Env.PROSODY_RATE_LIMIT_TIMEOUT | default "60" -}} |
|
|
|
|
{{ $RATE_LIMIT_ALLOW_RANGES := .Env.PROSODY_RATE_LIMIT_ALLOW_RANGES | default "10.0.0.0/8" -}} |
|
|
|
|
{{ $RATE_LIMIT_CACHE_SIZE := .Env.PROSODY_RATE_LIMIT_CACHE_SIZE | default "10000" -}} |
|
|
|
|
{{ $ENV := .Env -}} |
|
|
|
|
|
|
|
|
|
admins = { |
|
|
|
@ -70,28 +74,32 @@ muc_mapper_domain_prefix = "{{ $XMPP_MUC_DOMAIN_PREFIX }}"; |
|
|
|
|
|
|
|
|
|
http_default_host = "{{ $XMPP_DOMAIN }}" |
|
|
|
|
|
|
|
|
|
{{ if .Env.TURN_CREDENTIALS }} |
|
|
|
|
{{ if .Env.TURN_CREDENTIALS -}} |
|
|
|
|
external_service_secret = "{{.Env.TURN_CREDENTIALS}}"; |
|
|
|
|
{{ end }} |
|
|
|
|
{{- end }} |
|
|
|
|
|
|
|
|
|
{{ if or .Env.TURN_HOST .Env.TURNS_HOST }} |
|
|
|
|
{{ if or .Env.TURN_HOST .Env.TURNS_HOST -}} |
|
|
|
|
{{- $comma := "" -}} |
|
|
|
|
external_services = { |
|
|
|
|
{{ if .Env.TURN_HOST }} |
|
|
|
|
{{ range $index, $transport := $TURN_TRANSPORTS }} |
|
|
|
|
{{ if gt $index 0 }} |
|
|
|
|
, |
|
|
|
|
{{ end }} |
|
|
|
|
{ type = "turn", host = "{{ $ENV.TURN_HOST }}", port = {{ $TURN_PORT }}, transport = "{{ $transport }}", secret = true, ttl = 86400, algorithm = "turn" } |
|
|
|
|
{{ end }} |
|
|
|
|
{{ end }} |
|
|
|
|
{{ if and .Env.TURN_HOST .Env.TURNS_HOST }} |
|
|
|
|
, |
|
|
|
|
{{ end }} |
|
|
|
|
{{ if .Env.TURNS_HOST }} |
|
|
|
|
{ type = "turns", host = "{{ .Env.TURNS_HOST }}", port = {{ $TURNS_PORT }}, transport = "tcp", secret = true, ttl = 86400, algorithm = "turn" } |
|
|
|
|
{{ end }} |
|
|
|
|
{{ if $TURN_HOST -}} |
|
|
|
|
{{- range $idx1, $host := $TURN_HOSTS -}} |
|
|
|
|
{{- range $idx2, $transport := $TURN_TRANSPORTS -}} |
|
|
|
|
{{- $comma }} |
|
|
|
|
{ type = "turn", host = "{{ $host }}", port = {{ $TURN_PORT }}, transport = "{{ $transport }}", secret = true, ttl = 86400, algorithm = "turn" } |
|
|
|
|
{{- $comma = "," -}} |
|
|
|
|
{{- end -}} |
|
|
|
|
{{- end -}} |
|
|
|
|
{{- end -}} |
|
|
|
|
|
|
|
|
|
{{- if $TURNS_HOST -}} |
|
|
|
|
{{- range $idx, $host := $TURNS_HOSTS -}} |
|
|
|
|
{{- $comma }} |
|
|
|
|
{ type = "turns", host = "{{ $host }}", port = {{ $TURNS_PORT }}, transport = "tcp", secret = true, ttl = 86400, algorithm = "turn" } |
|
|
|
|
{{- $comma = "," -}} |
|
|
|
|
{{- end }} |
|
|
|
|
{{- end }} |
|
|
|
|
}; |
|
|
|
|
{{ end }} |
|
|
|
|
{{- end }} |
|
|
|
|
|
|
|
|
|
{{ if and $ENABLE_AUTH (eq $AUTH_TYPE "jwt") .Env.JWT_ACCEPTED_ISSUERS }} |
|
|
|
|
asap_accepted_issuers = { "{{ join "\",\"" (splitList "," .Env.JWT_ACCEPTED_ISSUERS) }}" } |
|
|
|
|