Няма описание
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

etc_prosody_conf.avail_jitsi_domain.cfg.lua.j2 3.9KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102
  1. plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }
  2. -- domain mapper options, must at least have domain base set to use the mapper
  3. muc_mapper_domain_base = "{{ jitsi_domain }}";
  4. external_service_secret = "6XhEs5NEtN735NXh";
  5. external_services = {
  6. { type = "stun", host = "{{ jitsi_domain }}", port = 3478 },
  7. { type = "turn", host = "{{ jitsi_domain }}", port = 3478, transport = "udp", secret = true, ttl = 86400, algorithm = "turn" },
  8. { type = "turns", host = "{{ jitsi_domain }}", port = 5349, transport = "tcp", secret = true, ttl = 86400, algorithm = "turn" }
  9. };
  10. cross_domain_bosh = false;
  11. consider_bosh_secure = true;
  12. -- https_ports = { }; -- Remove this line to prevent listening on port 5284
  13. -- https://ssl-config.mozilla.org/#server=haproxy&version=2.1&config=intermediate&openssl=1.1.0g&guideline=5.4
  14. ssl = {
  15. protocol = "tlsv1_2+";
  16. ciphers = "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"
  17. }
  18. VirtualHost "{{ jitsi_domain }}"
  19. -- enabled = false -- Remove this line to enable this host
  20. -- authentication = "anonymous"
  21. authentication = "internal_hashed"
  22. -- Properties below are modified by jitsi-meet-tokens package config
  23. -- and authentication above is switched to "token"
  24. --app_id="example_app_id"
  25. --app_secret="example_app_secret"
  26. -- Assign this host a certificate for TLS, otherwise it would use the one
  27. -- set in the global section (if any).
  28. -- Note that old-style SSL on port 5223 only supports one certificate, and will always
  29. -- use the global one.
  30. ssl = {
  31. key = "/etc/prosody/certs/{{ jitsi_domain }}.key";
  32. certificate = "/etc/prosody/certs/{{ jitsi_domain }}.crt";
  33. }
  34. speakerstats_component = "speakerstats.{{ jitsi_domain }}"
  35. conference_duration_component = "conferenceduration.{{ jitsi_domain }}"
  36. -- we need bosh
  37. modules_enabled = {
  38. "bosh";
  39. "pubsub";
  40. "ping"; -- Enable mod_ping
  41. "speakerstats";
  42. "external_services";
  43. "conference_duration";
  44. "muc_lobby_rooms";
  45. }
  46. c2s_require_encryption = false
  47. lobby_muc = "lobby.{{ jitsi_domain }}"
  48. main_muc = "conference.{{ jitsi_domain }}"
  49. -- muc_lobby_whitelist = { "recorder.{{ jitsi_domain }}" } -- Here we can whitelist jibri to enter lobby enabled rooms
  50. VirtualHost "guest.{{ jitsi_domain }}"
  51. authentication = "anonymous"
  52. c2s_require_encryption = false
  53. Component "conference.{{ jitsi_domain }}" "muc"
  54. storage = "memory"
  55. modules_enabled = {
  56. "muc_meeting_id";
  57. "muc_domain_mapper";
  58. --"token_verification";
  59. }
  60. admins = { "focus@auth.{{ jitsi_domain }}" }
  61. muc_room_locking = false
  62. muc_room_default_public_jids = true
  63. -- internal muc component
  64. Component "internal.auth.{{ jitsi_domain }}" "muc"
  65. storage = "memory"
  66. modules_enabled = {
  67. "ping";
  68. }
  69. admins = { "focus@auth.{{ jitsi_domain }}", "jvb@auth.{{ jitsi_domain }}" }
  70. muc_room_locking = false
  71. muc_room_default_public_jids = true
  72. VirtualHost "auth.{{ jitsi_domain }}"
  73. ssl = {
  74. key = "/etc/prosody/certs/auth.{{ jitsi_domain }}.key";
  75. certificate = "/etc/prosody/certs/auth.{{ jitsi_domain }}.crt";
  76. }
  77. authentication = "internal_hashed"
  78. -- Proxy to jicofo's user JID, so that it doesn't have to register as a component.
  79. Component "focus.{{ jitsi_domain }}" "client_proxy"
  80. target_address = "focus@auth.{{ jitsi_domain }}"
  81. Component "speakerstats.{{ jitsi_domain }}" "speakerstats_component"
  82. muc_component = "conference.{{ jitsi_domain }}"
  83. Component "conferenceduration.{{ jitsi_domain }}" "conference_duration_component"
  84. muc_component = "conference.{{ jitsi_domain }}"
  85. Component "lobby.{{ jitsi_domain }}" "muc"
  86. storage = "memory"
  87. restrict_room_creation = true
  88. muc_room_locking = false
  89. muc_room_default_public_jids = true