9ff3ce295c
web: persist letsencrypt certificates
...
Store them in the config volume so they are not regenerated on every
boot.
Closes: https://github.com/jitsi/docker-jitsi-meet/issues/71
6 years ago
165f313764
jigasi: add SDES srtp enabling possibility and healthcheck
6 years ago
6c0bbae73c
misc: group authentication options together
6 years ago
2e3576f6ca
prosody: add LDAP authentication via SASL mechanism
6 years ago
0db4b7dce9
doc: add JWT token example
6 years ago
fb93051bea
misc: all variables moved to .env file for fully customization of jitsi-meet service domains
6 years ago
df36d71542
xmpp: add jwt authentication support
6 years ago
a235af06d0
prosody: ignore errors when moving certificates
...
In case we have moved them before, for example.
6 years ago
b8faa26e75
prosody: fix owner for /config dir
6 years ago
5c0776b8ed
doc: this is no longer experimental
...
It seems to work well, who would have thought? :-)
6 years ago
63f8ddda18
build: only push "latest" and the release tag
6 years ago
7f00c8e7a2
web: sync Jitsi Meet configuration
6 years ago
3a534c63b5
xmpp: disable storage for MUC components
...
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/64
6 years ago
aaf7baa9e8
jigasi: set DOMAIN_BASE for SIP account
...
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/33
6 years ago
e848354042
xmpp: add default host to prosody config
6 years ago
bb7f68a749
web: update config.js from upstream
6 years ago
2da615c1f4
misc: fix typo in Makefile
6 years ago
1d0ecec9ef
build: add helper to tag images
6 years ago
7ebbf7b92a
jvb: fix specifying an empty list of STUN servers
...
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/43
6 years ago
30c425811e
misc: fix handling boolean values
...
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/30
6 years ago
e3583c72a6
jigasi: don't make SIP proxy port and transport mandatory
6 years ago
95a55915b7
xmpp: add ability to add custom prosody modules
6 years ago
fb1fdb1d53
doc: add missing entry in README
6 years ago
8e2964b006
xmpp: fix storage backend on prosody 0.11
6 years ago
0760253ebd
xmpp: fix default directory for generated certs
6 years ago
0f0a9420a0
jigasi: make it completely optional
6 years ago
19666889bd
doc: update README
6 years ago
072fb9d9d1
web: add strong ssl_ciphers and headers
6 years ago
7c6c6bcefb
web: enable ssl_protocol TLSv1.2 only
6 years ago
4b88a28fcc
jigasi: make SIP port and transport configurable
6 years ago
ab5f248913
web: run cron only when HTTPS and Let's Encrypt are enabled
6 years ago
da43e68854
jvb: add TCP Harvester configuration options
6 years ago
d6de4fdb58
web: fix typo
6 years ago
0399c6dd15
misc: update TODO
...
The entry is covered by the more generic next one.
6 years ago
cda11bc52f
web: add ability to redirect HTTP traffic to HTTPS
...
Useful if you're running this setup directly on the Internet, with a
Let's Encrypt certificate.
6 years ago
fcf83859e4
web: add ability to disable HTTPS
...
If TLS is terminated elsewhere and then connections are proxied over
HTTP, there is no need for it and it makes initialization a tad slower
on the first run.
6 years ago
5c988de8b6
web: refactor nginx configuration
6 years ago
f61ef3f093
web: add builtin Let's Encrypt support
6 years ago
2115bc0ed3
xmpp: remove unneeded files
6 years ago
ca47165807
web: move key generation to the main config script
6 years ago
415f10406f
web: split TLS configuration and make it stronger
...
Resources:
- https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- https://weakdh.org/sysadmin.html
6 years ago
c34b4814df
web: fix formatting
6 years ago
720f36c0fd
xmpp: no need to add backports repository
...
It's now already there since it's in base.
6 years ago
f65016d6f1
base: add backports repository
6 years ago
1b4f23b4e2
misc: fix typo
6 years ago
e1bd2447ae
jvb: add JVB_ENABLE_APIS env var
6 years ago
05d9bb994a
misc: declare container dependencies
6 years ago
a5412269c2
web: rename directory for web configuration
6 years ago
ee90a92d43
xmpp: add support for authentication
6 years ago
136460578d
doc: update diagrams
6 years ago
Saúl Ibarra Corretgé
netaskd
Paul Tiedtke
Saúl Ibarra Corretgé
Aleksandr Borisenko
Dan Caseley
Florent Poinsaut
Louis Sivillo