Commit Graph

209 Commits

Author SHA1 Message Date
Aaron van Meerten
9e9cee7991 prosody: add asap keyserver, empty token 2019-06-05 19:08:53 -05:00
Saúl Ibarra Corretgé
8da61612e9 prosody: introduce AUTH_TYPE
It simplifies selecting the desired authentication type, instead of
having a boolean for each.
2019-05-13 21:39:57 +02:00
Saúl Ibarra Corretgé
9ff3ce295c web: persist letsencrypt certificates
Store them in the config volume so they are not regenerated on every
boot.

Closes: https://github.com/jitsi/docker-jitsi-meet/issues/71
2019-05-01 14:40:38 +02:00
netaskd
165f313764 jigasi: add SDES srtp enabling possibility and healthcheck 2019-04-24 08:43:10 +02:00
Saúl Ibarra Corretgé
6c0bbae73c misc: group authentication options together 2019-04-17 10:01:22 +02:00
netaskd
2e3576f6ca prosody: add LDAP authentication via SASL mechanism 2019-04-17 09:56:43 +02:00
Saúl Ibarra Corretgé
0db4b7dce9 doc: add JWT token example 2019-04-17 09:46:36 +02:00
netaskd
fb93051bea misc: all variables moved to .env file for fully customization of jitsi-meet service domains 2019-03-15 09:14:10 +01:00
Paul Tiedtke
df36d71542 xmpp: add jwt authentication support 2019-02-21 08:34:41 +01:00
Saúl Ibarra Corretgé
a235af06d0 prosody: ignore errors when moving certificates
In case we have moved them before, for example.
2019-02-19 10:26:47 +01:00
netaskd
b8faa26e75 prosody: fix owner for /config dir 2019-02-19 10:14:48 +01:00
Saúl Ibarra Corretgé
5c0776b8ed doc: this is no longer experimental
It seems to work well, who would have thought? :-)
2019-02-13 12:01:31 +01:00
Saúl Ibarra Corretgé
63f8ddda18 build: only push "latest" and the release tag 2019-02-13 11:58:14 +01:00
Saúl Ibarra Corretgé
7f00c8e7a2 web: sync Jitsi Meet configuration 2019-02-13 10:50:17 +01:00
Saúl Ibarra Corretgé
3a534c63b5 xmpp: disable storage for MUC components
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/64
2019-02-13 10:49:09 +01:00
Saúl Ibarra Corretgé
aaf7baa9e8 jigasi: set DOMAIN_BASE for SIP account
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/33
2019-02-13 10:22:00 +01:00
Paul Tiedtke
e848354042 xmpp: add default host to prosody config 2019-02-12 10:06:13 +01:00
netaskd
bb7f68a749 web: update config.js from upstream 2019-02-12 10:04:12 +01:00
Paul Tiedtke
2da615c1f4 misc: fix typo in Makefile 2019-01-29 08:29:13 +01:00
Saúl Ibarra Corretgé
1d0ecec9ef build: add helper to tag images 2019-01-28 23:40:11 +01:00
Saúl Ibarra Corretgé
7ebbf7b92a jvb: fix specifying an empty list of STUN servers
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/43
2019-01-28 23:16:01 +01:00
Saúl Ibarra Corretgé
30c425811e misc: fix handling boolean values
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/30
2019-01-28 23:11:03 +01:00
Saúl Ibarra Corretgé
e3583c72a6 jigasi: don't make SIP proxy port and transport mandatory 2019-01-28 22:41:45 +01:00
Paul Tiedtke
95a55915b7 xmpp: add ability to add custom prosody modules 2019-01-28 22:11:17 +01:00
Paul Tiedtke
fb1fdb1d53 doc: add missing entry in README 2019-01-28 22:11:08 +01:00
Saúl Ibarra Corretgé
8e2964b006 xmpp: fix storage backend on prosody 0.11 2019-01-28 21:58:44 +01:00
Aleksandr Borisenko
0760253ebd xmpp: fix default directory for generated certs 2019-01-28 21:58:44 +01:00
Paul Tiedtke
0f0a9420a0 jigasi: make it completely optional 2019-01-28 21:58:44 +01:00
Saúl Ibarra Corretgé
19666889bd doc: update README 2018-12-10 08:52:41 +01:00
netaskd
072fb9d9d1 web: add strong ssl_ciphers and headers 2018-12-10 08:43:01 +01:00
netaskd
7c6c6bcefb web: enable ssl_protocol TLSv1.2 only 2018-12-04 19:56:09 +01:00
netaskd
4b88a28fcc jigasi: make SIP port and transport configurable 2018-12-04 13:05:48 +01:00
Paul Tiedtke
ab5f248913 web: run cron only when HTTPS and Let's Encrypt are enabled 2018-12-03 10:06:36 +01:00
Dan Caseley
da43e68854 jvb: add TCP Harvester configuration options 2018-11-29 19:43:07 +00:00
Saúl Ibarra Corretgé
d6de4fdb58 web: fix typo 2018-11-07 15:34:42 +01:00
Saúl Ibarra Corretgé
0399c6dd15 misc: update TODO
The entry is covered by the more generic next one.
2018-11-07 14:28:19 +01:00
Saúl Ibarra Corretgé
cda11bc52f web: add ability to redirect HTTP traffic to HTTPS
Useful if you're running this setup directly on the Internet, with a
Let's Encrypt certificate.
2018-11-07 14:27:22 +01:00
Saúl Ibarra Corretgé
fcf83859e4 web: add ability to disable HTTPS
If TLS is terminated elsewhere and then connections are proxied over
HTTP, there is no need for it and it makes initialization a tad slower
on the first run.
2018-11-07 14:15:09 +01:00
Saúl Ibarra Corretgé
5c988de8b6 web: refactor nginx configuration 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé
f61ef3f093 web: add builtin Let's Encrypt support 2018-11-07 14:02:36 +01:00
Saúl Ibarra Corretgé
2115bc0ed3 xmpp: remove unneeded files 2018-11-07 13:24:37 +01:00
Saúl Ibarra Corretgé
ca47165807 web: move key generation to the main config script 2018-11-07 10:08:09 +01:00
Saúl Ibarra Corretgé
415f10406f web: split TLS configuration and make it stronger
Resources:

- https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- https://weakdh.org/sysadmin.html
2018-11-07 10:08:09 +01:00
Saúl Ibarra Corretgé
c34b4814df web: fix formatting 2018-11-07 09:35:23 +01:00
Saúl Ibarra Corretgé
720f36c0fd xmpp: no need to add backports repository
It's now already there since it's in base.
2018-11-07 09:28:53 +01:00
Saúl Ibarra Corretgé
f65016d6f1 base: add backports repository 2018-11-07 09:28:08 +01:00
Florent Poinsaut
1b4f23b4e2 misc: fix typo 2018-11-06 15:43:42 +01:00
Louis Sivillo
e1bd2447ae jvb: add JVB_ENABLE_APIS env var 2018-11-05 18:11:29 +01:00
Saúl Ibarra Corretgé
05d9bb994a misc: declare container dependencies 2018-10-23 10:42:32 +02:00
Saúl Ibarra Corretgé
a5412269c2 web: rename directory for web configuration 2018-10-23 10:30:03 +02:00