jitsi-deployment/docker-compose.yml

version: '3'

services:
    # Frontend
    web:
        image: jitsi/web:latest
        restart: ${RESTART_POLICY}
        #        ports:
        #            - '${HTTP_PORT}:80'
        #            - '${HTTPS_PORT}:443'
        volumes:
            - ${CONFIG}/web:/config:Z
            - ${CONFIG}/web/letsencrypt:/etc/letsencrypt:Z
            - ${CONFIG}/transcripts:/usr/share/jitsi-meet/transcripts:Z
        environment:
            - ENABLE_AUTH
            - ENABLE_GUESTS
            - ENABLE_LETSENCRYPT
            - ENABLE_HTTP_REDIRECT
            - ENABLE_TRANSCRIPTIONS
            - DISABLE_HTTPS
            - JICOFO_AUTH_USER
            - LETSENCRYPT_DOMAIN
            - LETSENCRYPT_EMAIL
            - PUBLIC_URL
            - XMPP_DOMAIN
            - XMPP_AUTH_DOMAIN
            - XMPP_BOSH_URL_BASE
            - XMPP_GUEST_DOMAIN
            - XMPP_MUC_DOMAIN
            - XMPP_RECORDER_DOMAIN
            - ETHERPAD_URL_BASE
            - ETHERPAD_PUBLIC_URL
            - TZ
            - JIBRI_BREWERY_MUC
            - JIBRI_PENDING_TIMEOUT
            - JIBRI_XMPP_USER
            - JIBRI_XMPP_PASSWORD
            - JIBRI_RECORDER_USER
            - JIBRI_RECORDER_PASSWORD
            - ENABLE_RECORDING
        networks:
            traefik:
            meet.jitsi:
                aliases:
                    - ${XMPP_DOMAIN}
        labels:
            - "traefik.docker.network=traefik"
            - "traefik.enable=true"
            - "traefik.http.services.jitsi.loadbalancer.server.port=80"
            - "traefik.http.routers.jitsi.rule=Host(`jitsi.live.datenspuren.de`)"
            - "traefik.http.routers.jitsi.entrypoints=websecure"
            - "traefik.http.routers.jitsi.tls=true"
            - "traefik.http.routers.jitsi.tls.certresolver=le"
            - "traefik.http.routers.jitsi.service=jitsi"

    # XMPP server
    prosody:
        image: jitsi/prosody:latest
        restart: ${RESTART_POLICY}
        expose:
            - '5222'
            - '5347'
            - '5280'
        volumes:
            - ${CONFIG}/prosody/config:/config:Z
            - ${CONFIG}/prosody/prosody-plugins-custom:/prosody-plugins-custom:Z
        environment:
            - AUTH_TYPE
            - ENABLE_AUTH
            - ENABLE_GUESTS
            - ENABLE_LOBBY
            - GLOBAL_MODULES
            - GLOBAL_CONFIG
            - LDAP_URL
            - LDAP_BASE
            - LDAP_BINDDN
            - LDAP_BINDPW
            - LDAP_FILTER
            - LDAP_AUTH_METHOD
            - LDAP_VERSION
            - LDAP_USE_TLS
            - LDAP_TLS_CIPHERS
            - LDAP_TLS_CHECK_PEER
            - LDAP_TLS_CACERT_FILE
            - LDAP_TLS_CACERT_DIR
            - LDAP_START_TLS
            - XMPP_DOMAIN
            - XMPP_AUTH_DOMAIN
            - XMPP_GUEST_DOMAIN
            - XMPP_MUC_DOMAIN
            - XMPP_INTERNAL_MUC_DOMAIN
            - XMPP_MODULES
            - XMPP_MUC_MODULES
            - XMPP_INTERNAL_MUC_MODULES
            - XMPP_RECORDER_DOMAIN
            - JICOFO_COMPONENT_SECRET
            - JICOFO_AUTH_USER
            - JICOFO_AUTH_PASSWORD
            - JVB_AUTH_USER
            - JVB_AUTH_PASSWORD
            - JIGASI_XMPP_USER
            - JIGASI_XMPP_PASSWORD
            - JIBRI_XMPP_USER
            - JIBRI_XMPP_PASSWORD
            - JIBRI_RECORDER_USER
            - JIBRI_RECORDER_PASSWORD
            - JWT_APP_ID
            - JWT_APP_SECRET
            - JWT_ACCEPTED_ISSUERS
            - JWT_ACCEPTED_AUDIENCES
            - JWT_ASAP_KEYSERVER
            - JWT_ALLOW_EMPTY
            - JWT_AUTH_TYPE
            - JWT_TOKEN_AUTH_MODULE
            - LOG_LEVEL
            - TZ
        networks:
            traefik:
            meet.jitsi:
                aliases:
                    - ${XMPP_SERVER}
        labels:
            - "traefik.enable=false"

    # Focus component
    jicofo:
        image: jitsi/jicofo:latest
        restart: ${RESTART_POLICY}
        volumes:
            - ${CONFIG}/jicofo:/config:Z
        environment:
            - AUTH_TYPE
            - ENABLE_AUTH
            - XMPP_DOMAIN
            - XMPP_AUTH_DOMAIN
            - XMPP_INTERNAL_MUC_DOMAIN
            - XMPP_MUC_DOMAIN
            - XMPP_SERVER
            - JICOFO_COMPONENT_SECRET
            - JICOFO_AUTH_USER
            - JICOFO_AUTH_PASSWORD
            - JICOFO_RESERVATION_REST_BASE_URL
            - JVB_BREWERY_MUC
            - JIGASI_BREWERY_MUC
            - JIGASI_SIP_URI
            - JIBRI_BREWERY_MUC
            - JIBRI_PENDING_TIMEOUT
            - TZ
        depends_on:
            - prosody
        networks:          
            meet.jitsi:
        labels:
            - "traefik.enable=false"

    # Video bridge
    jvb:
        image: jitsi/jvb:latest
        restart: ${RESTART_POLICY}
        ports:
            - '${JVB_PORT}:${JVB_PORT}/udp'
            - '${JVB_TCP_PORT}:${JVB_TCP_PORT}'
        volumes:
            - ${CONFIG}/jvb:/config:Z
        environment:
            - DOCKER_HOST_ADDRESS
            - XMPP_AUTH_DOMAIN
            - XMPP_INTERNAL_MUC_DOMAIN
            - XMPP_SERVER
            - JVB_AUTH_USER
            - JVB_AUTH_PASSWORD
            - JVB_BREWERY_MUC
            - JVB_PORT
            - JVB_TCP_HARVESTER_DISABLED
            - JVB_TCP_PORT
            - JVB_STUN_SERVERS
            - JVB_ENABLE_APIS
            - TZ
        depends_on:
            - prosody
        networks:
            meet.jitsi:
        labels:
            - "traefik.enable=false"

# Custom network so all services can communicate using a FQDN
networks:
    traefik:
        external: true
    meet.jitsi:
Initial import 2018-03-14 10:23:13 +01:00			`version: '3'`

			`services:`
			`# Frontend`
			`web:`
misc: working on latest 2020-07-22 11:07:40 +02:00			`image: jitsi/web:latest`
misc: add configurable service restart policy 2020-04-11 19:11:07 +02:00			`restart: ${RESTART_POLICY}`
traefik config,... 2020-09-23 05:07:38 +02:00			`# ports:`
			`# - '${HTTP_PORT}:80'`
			`# - '${HTTPS_PORT}:443'`
Initial import 2018-03-14 10:23:13 +01:00			`volumes:`
misc: fix config volumes to work with SELinux Fixes: #472 2020-04-28 10:52:57 +02:00			`- ${CONFIG}/web:/config:Z`
			`- ${CONFIG}/web/letsencrypt:/etc/letsencrypt:Z`
			`- ${CONFIG}/transcripts:/usr/share/jitsi-meet/transcripts:Z`
Initial import 2018-03-14 10:23:13 +01:00			`environment:`
xmpp: add support for authentication 2018-10-17 23:02:10 +02:00			`- ENABLE_AUTH`
			`- ENABLE_GUESTS`
web: add builtin Let's Encrypt support 2018-11-07 11:23:08 +01:00			`- ENABLE_LETSENCRYPT`
web: add ability to redirect HTTP traffic to HTTPS Useful if you're running this setup directly on the Internet, with a Let's Encrypt certificate. 2018-11-07 14:27:22 +01:00			`- ENABLE_HTTP_REDIRECT`
jigasi,web: add transcription options 2019-02-07 12:45:36 +01:00			`- ENABLE_TRANSCRIPTIONS`
web: add ability to disable HTTPS If TLS is terminated elsewhere and then connections are proxied over HTTP, there is no need for it and it makes initialization a tad slower on the first run. 2018-11-07 14:15:09 +01:00			`- DISABLE_HTTPS`
xmpp: add ability to customize the jicofo auth user 2018-04-26 08:38:59 +02:00			`- JICOFO_AUTH_USER`
web: add builtin Let's Encrypt support 2018-11-07 11:23:08 +01:00			`- LETSENCRYPT_DOMAIN`
			`- LETSENCRYPT_EMAIL`
jigasi,web: add transcription options 2019-02-07 12:45:36 +01:00			`- PUBLIC_URL`
Initial import 2018-03-14 10:23:13 +01:00			`- XMPP_DOMAIN`
xmpp: add ability to customize the jicofo auth user 2018-04-26 08:38:59 +02:00			`- XMPP_AUTH_DOMAIN`
misc: all variables moved to .env file for fully customization of jitsi-meet service domains 2019-03-14 12:37:10 +01:00			`- XMPP_BOSH_URL_BASE`
xmpp: add support for authentication 2018-10-17 23:02:10 +02:00			`- XMPP_GUEST_DOMAIN`
xmpp: add ability to customize the XMPP MUC domain 2018-04-28 17:42:37 +02:00			`- XMPP_MUC_DOMAIN`
jibri: add jibri service 2019-08-05 12:10:42 +02:00			`- XMPP_RECORDER_DOMAIN`
web,etherpad: add etherpad addon for sharing document 2019-06-17 15:22:00 +02:00			`- ETHERPAD_URL_BASE`
etherpad: add ability to use a external server 2020-06-27 16:21:31 +02:00			`- ETHERPAD_PUBLIC_URL`
Initial import 2018-03-14 10:23:13 +01:00			`- TZ`
jibri: add jibri service 2019-08-05 12:10:42 +02:00			`- JIBRI_BREWERY_MUC`
			`- JIBRI_PENDING_TIMEOUT`
			`- JIBRI_XMPP_USER`
			`- JIBRI_XMPP_PASSWORD`
			`- JIBRI_RECORDER_USER`
			`- JIBRI_RECORDER_PASSWORD`
			`- ENABLE_RECORDING`
Initial import 2018-03-14 10:23:13 +01:00			`networks:`
traefik config,... 2020-09-23 05:07:38 +02:00			`traefik:`
Initial import 2018-03-14 10:23:13 +01:00			`meet.jitsi:`
jibri: add jibri service 2019-08-05 12:10:42 +02:00			`aliases:`
			`- ${XMPP_DOMAIN}`
traefik config,... 2020-09-23 05:07:38 +02:00			`labels:`
			`- "traefik.docker.network=traefik"`
			`- "traefik.enable=true"`
			`- "traefik.http.services.jitsi.loadbalancer.server.port=80"`
			- "traefik.http.routers.jitsi.rule=Host(`jitsi.live.datenspuren.de`)"
			`- "traefik.http.routers.jitsi.entrypoints=websecure"`
			`- "traefik.http.routers.jitsi.tls=true"`
			`- "traefik.http.routers.jitsi.tls.certresolver=le"`
			`- "traefik.http.routers.jitsi.service=jitsi"`
compose: update aliases Leave only the necessary ones and make a more straightforward one for the XMPP server. 2018-03-17 23:06:14 +01:00
Initial import 2018-03-14 10:23:13 +01:00			`# XMPP server`
			`prosody:`
misc: working on latest 2020-07-22 11:07:40 +02:00			`image: jitsi/prosody:latest`
misc: add configurable service restart policy 2020-04-11 19:11:07 +02:00			`restart: ${RESTART_POLICY}`
Initial import 2018-03-14 10:23:13 +01:00			`expose:`
			`- '5222'`
			`- '5347'`
			`- '5280'`
			`volumes:`
misc: fix config volumes to work with SELinux Fixes: #472 2020-04-28 10:52:57 +02:00			`- ${CONFIG}/prosody/config:/config:Z`
			`- ${CONFIG}/prosody/prosody-plugins-custom:/prosody-plugins-custom:Z`
Initial import 2018-03-14 10:23:13 +01:00			`environment:`
prosody: introduce AUTH_TYPE It simplifies selecting the desired authentication type, instead of having a boolean for each. 2019-05-04 14:52:35 +02:00			`- AUTH_TYPE`
xmpp: add support for authentication 2018-10-17 23:02:10 +02:00			`- ENABLE_AUTH`
			`- ENABLE_GUESTS`
prosody: add support for lobby 2020-07-22 11:00:46 +02:00			`- ENABLE_LOBBY`
prosody: documented global config and modules environment vars 2019-08-19 18:25:36 +02:00			`- GLOBAL_MODULES`
			`- GLOBAL_CONFIG`
prosody: add LDAP authentication via SASL mechanism 2019-03-13 18:10:40 +01:00			`- LDAP_URL`
			`- LDAP_BASE`
			`- LDAP_BINDDN`
			`- LDAP_BINDPW`
			`- LDAP_FILTER`
			`- LDAP_AUTH_METHOD`
			`- LDAP_VERSION`
			`- LDAP_USE_TLS`
			`- LDAP_TLS_CIPHERS`
			`- LDAP_TLS_CHECK_PEER`
			`- LDAP_TLS_CACERT_FILE`
			`- LDAP_TLS_CACERT_DIR`
ldap: add option for ldap starttls support 2020-03-13 21:07:44 +01:00			`- LDAP_START_TLS`
Initial import 2018-03-14 10:23:13 +01:00			`- XMPP_DOMAIN`
xmpp: make the auth XMPP domain configurable 2018-03-28 08:42:09 +02:00			`- XMPP_AUTH_DOMAIN`
xmpp: add support for authentication 2018-10-17 23:02:10 +02:00			`- XMPP_GUEST_DOMAIN`
xmpp: add ability to customize the XMPP MUC domain 2018-04-28 17:42:37 +02:00			`- XMPP_MUC_DOMAIN`
jvb: use MUC connections for the JVB 2018-10-16 21:15:46 +02:00			`- XMPP_INTERNAL_MUC_DOMAIN`
xmpp: add ability to add custom prosody modules 2019-01-15 14:29:50 +01:00			`- XMPP_MODULES`
			`- XMPP_MUC_MODULES`
			`- XMPP_INTERNAL_MUC_MODULES`
jibri: add jibri service 2019-08-05 12:10:42 +02:00			`- XMPP_RECORDER_DOMAIN`
Initial import 2018-03-14 10:23:13 +01:00			`- JICOFO_COMPONENT_SECRET`
			`- JICOFO_AUTH_USER`
			`- JICOFO_AUTH_PASSWORD`
jvb: use MUC connections for the JVB 2018-10-16 21:15:46 +02:00			`- JVB_AUTH_USER`
			`- JVB_AUTH_PASSWORD`
jigasi: add jigasi support for SIP audio calls 2018-10-17 11:11:27 +02:00			`- JIGASI_XMPP_USER`
			`- JIGASI_XMPP_PASSWORD`
jibri: add jibri service 2019-08-05 12:10:42 +02:00			`- JIBRI_XMPP_USER`
			`- JIBRI_XMPP_PASSWORD`
			`- JIBRI_RECORDER_USER`
			`- JIBRI_RECORDER_PASSWORD`
xmpp: add jwt authentication support 2019-02-21 08:34:41 +01:00			`- JWT_APP_ID`
			`- JWT_APP_SECRET`
			`- JWT_ACCEPTED_ISSUERS`
			`- JWT_ACCEPTED_AUDIENCES`
docker-compose: adds comments and docker-compose entries for new shell variables 2019-08-19 18:21:13 +02:00			`- JWT_ASAP_KEYSERVER`
			`- JWT_ALLOW_EMPTY`
			`- JWT_AUTH_TYPE`
			`- JWT_TOKEN_AUTH_MODULE`
			`- LOG_LEVEL`
Initial import 2018-03-14 10:23:13 +01:00			`- TZ`
			`networks:`
traefik config,... 2020-09-23 05:07:38 +02:00			`traefik:`
Initial import 2018-03-14 10:23:13 +01:00			`meet.jitsi:`
			`aliases:`
misc: all variables moved to .env file for fully customization of jitsi-meet service domains 2019-03-14 12:37:10 +01:00			`- ${XMPP_SERVER}`
traefik config,... 2020-09-23 05:07:38 +02:00			`labels:`
			`- "traefik.enable=false"`
compose: update aliases Leave only the necessary ones and make a more straightforward one for the XMPP server. 2018-03-17 23:06:14 +01:00
Initial import 2018-03-14 10:23:13 +01:00			`# Focus component`
			`jicofo:`
misc: working on latest 2020-07-22 11:07:40 +02:00			`image: jitsi/jicofo:latest`
misc: add configurable service restart policy 2020-04-11 19:11:07 +02:00			`restart: ${RESTART_POLICY}`
Initial import 2018-03-14 10:23:13 +01:00			`volumes:`
misc: fix config volumes to work with SELinux Fixes: #472 2020-04-28 10:52:57 +02:00			`- ${CONFIG}/jicofo:/config:Z`
Initial import 2018-03-14 10:23:13 +01:00			`environment:`
jicofo: fix setting incorrect auth URL scheme for JWT 2020-05-07 22:29:52 +02:00			`- AUTH_TYPE`
xmpp: add support for authentication 2018-10-17 23:02:10 +02:00			`- ENABLE_AUTH`
Initial import 2018-03-14 10:23:13 +01:00			`- XMPP_DOMAIN`
xmpp: make the auth XMPP domain configurable 2018-03-28 08:42:09 +02:00			`- XMPP_AUTH_DOMAIN`
jvb: use MUC connections for the JVB 2018-10-16 21:15:46 +02:00			`- XMPP_INTERNAL_MUC_DOMAIN`
jicofo: pass XMPP_MUC_DOMAIN through docker-compose.yml 2020-08-10 09:21:34 +02:00			`- XMPP_MUC_DOMAIN`
misc: all variables moved to .env file for fully customization of jitsi-meet service domains 2019-03-14 12:37:10 +01:00			`- XMPP_SERVER`
Initial import 2018-03-14 10:23:13 +01:00			`- JICOFO_COMPONENT_SECRET`
			`- JICOFO_AUTH_USER`
			`- JICOFO_AUTH_PASSWORD`
jicofo: add support of reservation REST API 2020-01-28 08:53:19 +01:00			`- JICOFO_RESERVATION_REST_BASE_URL`
jvb: use MUC connections for the JVB 2018-10-16 21:15:46 +02:00			`- JVB_BREWERY_MUC`
jigasi: add jigasi support for SIP audio calls 2018-10-17 11:11:27 +02:00			`- JIGASI_BREWERY_MUC`
jicofo: only configure Jigasi brewery if Jigasi is configured Otherwise conferene.isSIPCallingSupported() will return true. 2020-03-30 14:05:15 +02:00			`- JIGASI_SIP_URI`
jibri: add jibri service 2019-08-05 12:10:42 +02:00			`- JIBRI_BREWERY_MUC`
			`- JIBRI_PENDING_TIMEOUT`
Initial import 2018-03-14 10:23:13 +01:00			`- TZ`
misc: declare container dependencies 2018-10-23 10:42:32 +02:00			`depends_on:`
			`- prosody`
traefik config,... 2020-09-23 05:07:38 +02:00			`networks:`
Initial import 2018-03-14 10:23:13 +01:00			`meet.jitsi:`
traefik config,... 2020-09-23 05:07:38 +02:00			`labels:`
			`- "traefik.enable=false"`
Initial import 2018-03-14 10:23:13 +01:00
			`# Video bridge`
			`jvb:`
misc: working on latest 2020-07-22 11:07:40 +02:00			`image: jitsi/jvb:latest`
misc: add configurable service restart policy 2020-04-11 19:11:07 +02:00			`restart: ${RESTART_POLICY}`
Initial import 2018-03-14 10:23:13 +01:00			`ports:`
core: make HTTP, HTTPS and JVB ports configurable 2018-09-19 22:12:57 +02:00			`- '${JVB_PORT}:${JVB_PORT}/udp'`
jvb: use JVB_TCP_PORT for exposing the port JVB_TCP_MAPPED_PORT is the port of on the public external interface which may be on a completely different server / router. https://github.com/jitsi/jitsi-videobridge/blob/master/doc/tcp.md Co-authored-by: Andreas Hansson <andreas.hansson@tritech.se> 2020-06-11 09:30:01 +02:00			`- '${JVB_TCP_PORT}:${JVB_TCP_PORT}'`
Initial import 2018-03-14 10:23:13 +01:00			`volumes:`
misc: fix config volumes to work with SELinux Fixes: #472 2020-04-28 10:52:57 +02:00			`- ${CONFIG}/jvb:/config:Z`
Initial import 2018-03-14 10:23:13 +01:00			`environment:`
jvb: run it on the user defined network 2018-03-25 10:36:35 +02:00			`- DOCKER_HOST_ADDRESS`
xmpp: make the auth XMPP domain configurable 2018-03-28 08:42:09 +02:00			`- XMPP_AUTH_DOMAIN`
jvb: use MUC connections for the JVB 2018-10-16 21:15:46 +02:00			`- XMPP_INTERNAL_MUC_DOMAIN`
misc: all variables moved to .env file for fully customization of jitsi-meet service domains 2019-03-14 12:37:10 +01:00			`- XMPP_SERVER`
jvb: use MUC connections for the JVB 2018-10-16 21:15:46 +02:00			`- JVB_AUTH_USER`
			`- JVB_AUTH_PASSWORD`
			`- JVB_BREWERY_MUC`
core: make HTTP, HTTPS and JVB ports configurable 2018-09-19 22:12:57 +02:00			`- JVB_PORT`
jvb: add TCP Harvester configuration options 2018-11-29 20:43:07 +01:00			`- JVB_TCP_HARVESTER_DISABLED`
			`- JVB_TCP_PORT`
Initial import 2018-03-14 10:23:13 +01:00			`- JVB_STUN_SERVERS`
jvb: add JVB_ENABLE_APIS env var 2018-11-05 18:11:29 +01:00			`- JVB_ENABLE_APIS`
Initial import 2018-03-14 10:23:13 +01:00			`- TZ`
misc: declare container dependencies 2018-10-23 10:42:32 +02:00			`depends_on:`
			`- prosody`
jvb: run it on the user defined network 2018-03-25 10:36:35 +02:00			`networks:`
			`meet.jitsi:`
traefik config,... 2020-09-23 05:07:38 +02:00			`labels:`
			`- "traefik.enable=false"`
Initial import 2018-03-14 10:23:13 +01:00
			`# Custom network so all services can communicate using a FQDN`
			`networks:`
traefik config,... 2020-09-23 05:07:38 +02:00			`traefik:`
			`external: true`
Initial import 2018-03-14 10:23:13 +01:00			`meet.jitsi:`