commit 56581588c3711d36b79f4e23e6f1e24f01746ebc · pyrox.dev/nixpkgs

nixos/modules/services/web-apps/jitsi-meet.md

···

       19
       19
        
       }

     

       20
       20
        
       ```

     

       21
       21
        
       

     

       22
       22
       +
       Jitsi Meet depends on the Prosody XMPP server only for message passing from

     

       23
       23
       +
       the web browser while the default Prosody configuration is intended for use

     

       24
       24
       +
       with standalone XMPP clients and XMPP federation. If you only use Prosody as

     

       25
       25
       +
       a backend for Jitsi Meet it is therefore recommended to also enable

     

       26
       26
       +
       {option}`services.jitsi-meet.prosody.lockdown` option to disable unnecessary

     

       27
       27
       +
       Prosody features such as federation or the file proxy.

     

       28
       28
       +
       

     

       22
       29
        
       ## Configuration {#module-services-jitsi-configuration}

     

       23
       30
        
       

     

       24
       31
        
       Here is the minimal configuration with additional configurations:

     
···

       27
       34
        
         services.jitsi-meet = {

     

       28
       35
        
           enable = true;

     

       29
       36
        
           hostName = "jitsi.example.com";

     

       37
       37
       +
           prosody.lockdown = true;

     

       30
       38
        
           config = {

     

       31
       39
        
             enableWelcomePage = false;

     

       32
       40
        
             prejoinPageEnabled = true;

+23 -2

nixos/modules/services/web-apps/jitsi-meet.nix

···

       175
       175
        
           prosody.enable = mkOption {

     

       176
       176
        
             type = bool;

     

       177
       177
        
             default = true;

     

       178
       178
       +
             example = false;

     

       178
       179
        
             description = ''

     

       179
       180
        
               Whether to configure Prosody to relay XMPP messages between Jitsi Meet components. Turn this

     

       180
       181
        
               off if you want to configure it manually.

     

       182
       182
       +
             '';

     

       183
       183
       +
           };

     

       184
       184
       +
           prosody.lockdown = mkOption {

     

       185
       185
       +
             type = bool;

     

       186
       186
       +
             default = false;

     

       187
       187
       +
             example = true;

     

       188
       188
       +
             description = ''

     

       189
       189
       +
               Whether to disable Prosody features not needed by Jitsi Meet.

     

       190
       190
       +
       

     

       191
       191
       +
               The default Prosody configuration assumes that it will be used as a

     

       192
       192
       +
               general-purpose XMPP server rather than as a companion service for

     

       193
       193
       +
               Jitsi Meet. This option reconfigures Prosody to only listen on

     

       194
       194
       +
               localhost without support for TLS termination, XMPP federation or

     

       195
       195
       +
               the file transfer proxy.

     

       181
       196
        
             '';

     

       182
       197
        
           };

     

       183
       198
        
       

     
···

       211
       226
        
               smacks = mkDefault true;

     

       212
       227
        
               tls = mkDefault true;

     

       213
       228
        
               websocket = mkDefault true;

     

       229
       229
       +
               proxy65 = mkIf cfg.prosody.lockdown (mkDefault false);

     

       214
       230
        
             };

     

       231
       231
       +
             httpInterfaces = mkIf cfg.prosody.lockdown (mkDefault [ "127.0.0.1" ]);

     

       232
       232
       +
             httpsPorts = mkIf cfg.prosody.lockdown (mkDefault []);

     

       215
       233
        
             muc = [

     

       216
       234
        
               {

     

       217
       235
        
                 domain = "conference.${cfg.hostName}";

     
···

       300
       318
        
                   muc_component = "conference.${cfg.hostName}"

     

       301
       319
        
                   breakout_rooms_component = "breakout.${cfg.hostName}"

     

       302
       320
        
               '')

     

       303
       303
       -
               (mkBefore ''

     

       321
       321
       +
               (mkBefore (''

     

       304
       322
        
                 muc_mapper_domain_base = "${cfg.hostName}"

     

       305
       323
        
       

     

       306
       324
        
                 cross_domain_websocket = true;

     
···

       310
       328
        
                   "focus@auth.${cfg.hostName}",

     

       311
       329
        
                   "jvb@auth.${cfg.hostName}"

     

       312
       330
        
                 }

     

       313
       313
       -
               '')

     

       331
       331
       +
               '' + optionalString cfg.prosody.lockdown ''

     

       332
       332
       +
                 c2s_interfaces = { "127.0.0.1" };

     

       333
       333
       +
                 modules_disabled = { "s2s" };

     

       334
       334
       +
               ''))

     

       314
       335
        
             ];

     

       315
       336
        
             virtualHosts.${cfg.hostName} = {

     

       316
       337
        
               enabled = true;