.env 8.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348
  1. #all the lines that have been touched have a:
  2. # "#EDITED:"
  3. #before
  4. #the fields you NEED to change are filled with "CHANGEME"
  5. # Security
  6. #
  7. # Set these to strong passwords to avoid intruders from impersonating a service account
  8. # The service(s) won't start unless these are specified
  9. # Running ./gen-passwords.sh will update .env with strong passwords
  10. # You may skip the Jigasi and Jibri passwords if you are not using those
  11. # DO NOT reuse passwords
  12. #
  13. # XMPP component password for Jicofo
  14. #EDITED:
  15. JICOFO_COMPONENT_SECRET=CHANGEME
  16. # XMPP password for Jicofo client connections
  17. #EDITED:
  18. JICOFO_AUTH_PASSWORD=CHANGEME
  19. # XMPP password for JVB client connections
  20. #EDITED:
  21. JVB_AUTH_PASSWORD=CHANGEME
  22. # XMPP password for Jigasi MUC client connections
  23. #EDITED:
  24. JIGASI_XMPP_PASSWORD=CHANGEME
  25. # XMPP recorder password for Jibri client connections
  26. #EDITED:
  27. JIBRI_RECORDER_PASSWORD=CHANGEME
  28. # XMPP password for Jibri client connections
  29. #EDITED:
  30. JIBRI_XMPP_PASSWORD=CHANGEME
  31. #
  32. # Basic configuration options
  33. #
  34. # Directory where all configuration will be stored
  35. CONFIG=~/.jitsi-meet-cfg
  36. # Exposed HTTP port
  37. #EDITED:
  38. HTTP_PORT=80
  39. # Exposed HTTPS port
  40. #EDITED:
  41. HTTPS_PORT=443
  42. # System time zone
  43. #EDITED:
  44. TZ=Europe/Rome
  45. # Public URL for the web service
  46. #EDITED:
  47. PUBLIC_URL=https://CHANGEME
  48. # IP address of the Docker host
  49. # See the "Running behind NAT or on a LAN environment" section in the README
  50. #EDITED:
  51. DOCKER_HOST_ADDRESS=CHANGEME
  52. #
  53. # Let's Encrypt configuration
  54. #
  55. # Enable Let's Encrypt certificate generation
  56. #EDITED:
  57. ENABLE_LETSENCRYPT=1
  58. # Domain for which to generate the certificate
  59. #EDITED:
  60. LETSENCRYPT_DOMAIN=CHANGEME
  61. # E-Mail for receiving important account notifications (mandatory)
  62. #EDITED:
  63. LETSENCRYPT_EMAIL=CHANGEME
  64. #
  65. # Etherpad integration (for document sharing)
  66. #
  67. # Set etherpad-lite URL (uncomment to enable)
  68. #ETHERPAD_URL_BASE=http://etherpad.meet.jitsi:9001
  69. #
  70. # Basic Jigasi configuration options (needed for SIP gateway support)
  71. #
  72. # SIP URI for incoming / outgoing calls
  73. #JIGASI_SIP_URI=test@sip2sip.info
  74. # Password for the specified SIP account as a clear text
  75. #JIGASI_SIP_PASSWORD=passw0rd
  76. # SIP server (use the SIP account domain if in doubt)
  77. #JIGASI_SIP_SERVER=sip2sip.info
  78. # SIP server port
  79. #JIGASI_SIP_PORT=5060
  80. # SIP server transport
  81. #JIGASI_SIP_TRANSPORT=UDP
  82. #
  83. # Authentication configuration (see README for details)
  84. #
  85. #Followed this guide to allow only a registered user to start a room: https://github.com/jitsi/docker-jitsi-meet#authentication
  86. #the guests will be able to access the room once the organizer joined
  87. # Enable authentication
  88. #EDITED:
  89. ENABLE_AUTH=1
  90. # Enable guest access
  91. #EDITED:
  92. ENABLE_GUESTS=1
  93. # Select authentication type: internal, jwt or ldap
  94. #EDITED:
  95. AUTH_TYPE=internal
  96. # JWT authentication
  97. #
  98. # Application identifier
  99. #JWT_APP_ID=my_jitsi_app_id
  100. # Application secret known only to your token
  101. #JWT_APP_SECRET=my_jitsi_app_secret
  102. # (Optional) Set asap_accepted_issuers as a comma separated list
  103. #JWT_ACCEPTED_ISSUERS=my_web_client,my_app_client
  104. # (Optional) Set asap_accepted_audiences as a comma separated list
  105. #JWT_ACCEPTED_AUDIENCES=my_server1,my_server2
  106. # LDAP authentication (for more information see the Cyrus SASL saslauthd.conf man page)
  107. #
  108. # LDAP url for connection
  109. #LDAP_URL=ldaps://ldap.domain.com/
  110. # LDAP base DN. Can be empty
  111. #LDAP_BASE=DC=example,DC=domain,DC=com
  112. # LDAP user DN. Do not specify this parameter for the anonymous bind
  113. #LDAP_BINDDN=CN=binduser,OU=users,DC=example,DC=domain,DC=com
  114. # LDAP user password. Do not specify this parameter for the anonymous bind
  115. #LDAP_BINDPW=LdapUserPassw0rd
  116. # LDAP filter. Tokens example:
  117. # %1-9 - if the input key is user@mail.domain.com, then %1 is com, %2 is domain and %3 is mail
  118. # %s - %s is replaced by the complete service string
  119. # %r - %r is replaced by the complete realm string
  120. #LDAP_FILTER=(sAMAccountName=%u)
  121. # LDAP authentication method
  122. #LDAP_AUTH_METHOD=bind
  123. # LDAP version
  124. #LDAP_VERSION=3
  125. # LDAP TLS using
  126. #LDAP_USE_TLS=1
  127. # List of SSL/TLS ciphers to allow
  128. #LDAP_TLS_CIPHERS=SECURE256:SECURE128:!AES-128-CBC:!ARCFOUR-128:!CAMELLIA-128-CBC:!3DES-CBC:!CAMELLIA-128-CBC
  129. # Require and verify server certificate
  130. #LDAP_TLS_CHECK_PEER=1
  131. # Path to CA cert file. Used when server sertificate verify is enabled
  132. #LDAP_TLS_CACERT_FILE=/etc/ssl/certs/ca-certificates.crt
  133. # Path to CA certs directory. Used when server sertificate verify is enabled
  134. #LDAP_TLS_CACERT_DIR=/etc/ssl/certs
  135. # Wether to use starttls, implies LDAPv3 and requires ldap:// instead of ldaps://
  136. # LDAP_START_TLS=1
  137. #
  138. # Advanced configuration options (you generally don't need to change these)
  139. #
  140. # Internal XMPP domain
  141. XMPP_DOMAIN=meet.jitsi
  142. # Internal XMPP server
  143. XMPP_SERVER=xmpp.meet.jitsi
  144. # Internal XMPP server URL
  145. XMPP_BOSH_URL_BASE=http://xmpp.meet.jitsi:5280
  146. # Internal XMPP domain for authenticated services
  147. XMPP_AUTH_DOMAIN=auth.meet.jitsi
  148. # XMPP domain for the MUC
  149. XMPP_MUC_DOMAIN=muc.meet.jitsi
  150. # XMPP domain for the internal MUC used for jibri, jigasi and jvb pools
  151. XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
  152. # XMPP domain for unauthenticated users
  153. XMPP_GUEST_DOMAIN=guest.meet.jitsi
  154. # Custom Prosody modules for XMPP_DOMAIN (comma separated)
  155. XMPP_MODULES=
  156. # Custom Prosody modules for MUC component (comma separated)
  157. XMPP_MUC_MODULES=
  158. # Custom Prosody modules for internal MUC component (comma separated)
  159. XMPP_INTERNAL_MUC_MODULES=
  160. # MUC for the JVB pool
  161. JVB_BREWERY_MUC=jvbbrewery
  162. # XMPP user for JVB client connections
  163. JVB_AUTH_USER=jvb
  164. # STUN servers used to discover the server's public IP
  165. JVB_STUN_SERVERS=meet-jit-si-turnrelay.jitsi.net:443
  166. # Media port for the Jitsi Videobridge
  167. JVB_PORT=10000
  168. # TCP Fallback for Jitsi Videobridge for when UDP isn't available
  169. JVB_TCP_HARVESTER_DISABLED=true
  170. JVB_TCP_PORT=4443
  171. # A comma separated list of APIs to enable when the JVB is started [default: none]
  172. # See https://github.com/jitsi/jitsi-videobridge/blob/master/doc/rest.md for more information
  173. #JVB_ENABLE_APIS=rest,colibri
  174. # XMPP user for Jicofo client connections.
  175. # NOTE: this option doesn't currently work due to a bug
  176. JICOFO_AUTH_USER=focus
  177. # Base URL of Jicofo's reservation REST API
  178. #JICOFO_RESERVATION_REST_BASE_URL=http://reservation.example.com
  179. # XMPP user for Jigasi MUC client connections
  180. JIGASI_XMPP_USER=jigasi
  181. # MUC name for the Jigasi pool
  182. JIGASI_BREWERY_MUC=jigasibrewery
  183. # Minimum port for media used by Jigasi
  184. JIGASI_PORT_MIN=20000
  185. # Maximum port for media used by Jigasi
  186. JIGASI_PORT_MAX=20050
  187. # Enable SDES srtp
  188. #JIGASI_ENABLE_SDES_SRTP=1
  189. # Keepalive method
  190. #JIGASI_SIP_KEEP_ALIVE_METHOD=OPTIONS
  191. # Health-check extension
  192. #JIGASI_HEALTH_CHECK_SIP_URI=keepalive
  193. # Health-check interval
  194. #JIGASI_HEALTH_CHECK_INTERVAL=300000
  195. #
  196. # Enable Jigasi transcription
  197. #ENABLE_TRANSCRIPTIONS=1
  198. # Jigasi will record audio when transcriber is on [default: false]
  199. #JIGASI_TRANSCRIBER_RECORD_AUDIO=true
  200. # Jigasi will send transcribed text to the chat when transcriber is on [default: false]
  201. #JIGASI_TRANSCRIBER_SEND_TXT=true
  202. # Jigasi will post an url to the chat with transcription file [default: false]
  203. #JIGASI_TRANSCRIBER_ADVERTISE_URL=true
  204. # Credentials for connect to Cloud Google API from Jigasi
  205. # Please read https://cloud.google.com/text-to-speech/docs/quickstart-protocol
  206. # section "Before you begin" paragraph 1 to 5
  207. # Copy the values from the json to the related env vars
  208. #GC_PROJECT_ID=
  209. #GC_PRIVATE_KEY_ID=
  210. #GC_PRIVATE_KEY=
  211. #GC_CLIENT_EMAIL=
  212. #GC_CLIENT_ID=
  213. #GC_CLIENT_CERT_URL=
  214. # Enable recording
  215. #ENABLE_RECORDING=1
  216. # XMPP domain for the jibri recorder
  217. XMPP_RECORDER_DOMAIN=recorder.meet.jitsi
  218. # XMPP recorder user for Jibri client connections
  219. JIBRI_RECORDER_USER=recorder
  220. # Directory for recordings inside Jibri container
  221. JIBRI_RECORDING_DIR=/config/recordings
  222. # The finalizing script. Will run after recording is complete
  223. JIBRI_FINALIZE_RECORDING_SCRIPT_PATH=/config/finalize.sh
  224. # XMPP user for Jibri client connections
  225. JIBRI_XMPP_USER=jibri
  226. # MUC name for the Jibri pool
  227. JIBRI_BREWERY_MUC=jibribrewery
  228. # MUC connection timeout
  229. JIBRI_PENDING_TIMEOUT=90
  230. # When jibri gets a request to start a service for a room, the room
  231. # jid will look like: roomName@optional.prefixes.subdomain.xmpp_domain
  232. # We'll build the url for the call by transforming that into:
  233. # https://xmpp_domain/subdomain/roomName
  234. # So if there are any prefixes in the jid (like jitsi meet, which
  235. # has its participants join a muc at conference.xmpp_domain) then
  236. # list that prefix here so it can be stripped out to generate
  237. # the call url correctly
  238. JIBRI_STRIP_DOMAIN_JID=muc
  239. # Directory for logs inside Jibri container
  240. JIBRI_LOGS_DIR=/config/logs
  241. # Disable HTTPS: handle TLS connections outside of this setup
  242. #DISABLE_HTTPS=1
  243. # Redirect HTTP traffic to HTTPS
  244. # Necessary for Let's Encrypt, relies on standard HTTPS port (443)
  245. #EDITED:
  246. ENABLE_HTTP_REDIRECT=1