jiti-meet/debian/jitsi-meet-turnserver.postinst

#!/bin/bash
# postinst script for jitsi-meet-turnserver
#
# see: dh_installdeb(1)

set -e

# summary of how this script can be called:
#        * <postinst> `configure' <most-recently-configured-version>
#        * <old-postinst> `abort-upgrade' <new version>
#        * <conflictor's-postinst> `abort-remove' `in-favour' <package>
#          <new-version>
#        * <postinst> `abort-remove'
#        * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
#          <failed-install-package> <version> `removing'
#          <conflicting-package> <version>
# for details, see http://www.debian.org/doc/debian-policy/ or
# the debian-policy package

case "$1" in
    configure)
        # loading debconf
        . /usr/share/debconf/confmodule

        # try to get host from jitsi-videobridge
        db_get jitsi-videobridge/jvb-hostname
        if [ -z "$RET" ] ; then
            # server hostname
            db_set jitsi-videobridge/jvb-hostname "localhost"
            db_input critical jitsi-videobridge/jvb-hostname || true
            db_go
        fi
        JVB_HOSTNAME="$RET"

        TURN_CONFIG="/etc/turnserver.conf"
        NGINX_CONFIG="/etc/nginx/sites-available/$JVB_HOSTNAME.conf"
        JITSI_MEET_CONFIG="/etc/jitsi/meet/$JVB_HOSTNAME-config.js"

        # detect dpkg-reconfigure, just delete old links
        db_get jitsi-meet-turnserver/jvb-hostname
        JVB_HOSTNAME_OLD=$RET
        if [ -n "$RET" ] && [ ! "$JVB_HOSTNAME_OLD" = "$JVB_HOSTNAME" ] ; then
            rm -f $TURN_CONFIG
        fi

        # this detect only old installations with no nginx
        db_get jitsi-meet/jvb-serve || true
        if [ ! -f $NGINX_CONFIG -o "$RET" = "true" ] ; then
            # nothing to do
            echo ""
            echo "turnserver not configured as no nginx found to multiplex traffic"
            echo ""
            db_stop
            exit 0
        fi

        # stores the hostname so we will reuse it later, like in purge
        db_set jitsi-meet-turnserver/jvb-hostname "$JVB_HOSTNAME"

        # try to get turnserver password
        db_get jitsi-meet-prosody/turn-secret
        if [ -z "$RET" ] ; then
            db_input critical jitsi-meet-prosody/turn-secret || true
            db_go
        fi
        TURN_SECRET="$RET"

        if [[ -f $TURN_CONFIG ]] && ! grep -q "jitsi-meet coturn config" "$TURN_CONFIG" ; then
            PUBLIC_IP=$(dig +short myip.opendns.com @resolver1.opendns.com)
            cp /usr/share/jitsi-meet-turnserver/turnserver.conf $TURN_CONFIG
            sed -i "s/jitsi-meet.example.com/$JVB_HOSTNAME/g" $TURN_CONFIG
            sed -i "s/__turnSecret__/$TURN_SECRET/g" $TURN_CONFIG
            sed -i "s/__external_ip_address__/$JVB_HOSTNAME/g" $TURN_CONFIG

            # SSL for nginx
            db_get jitsi-meet/cert-choice
            CERT_CHOICE="$RET"

            if [ "$CERT_CHOICE" = "I want to use my own certificate" ] ; then
                db_get jitsi-meet/cert-path-key
                CERT_KEY="$RET"
                db_get jitsi-meet/cert-path-crt
                CERT_CRT="$RET"

                # replace self-signed certificate paths with user provided ones
                CERT_KEY_ESC=$(echo $CERT_KEY | sed 's/\./\\\./g')
                CERT_KEY_ESC=$(echo $CERT_KEY_ESC | sed 's/\//\\\//g')
                sed -i "s/pkey=\/etc\/jitsi\/meet\/.*key/pkey=$CERT_KEY_ESC/g" $TURN_CONFIG
                CERT_CRT_ESC=$(echo $CERT_CRT | sed 's/\./\\\./g')
                CERT_CRT_ESC=$(echo $CERT_CRT_ESC | sed 's/\//\\\//g')
                sed -i "s/cert=\/etc\/jitsi\/meet\/.*crt/cert=$CERT_CRT_ESC/g" $TURN_CONFIG
            fi

            sed -i "s/#TURNSERVER_ENABLED/TURNSERVER_ENABLED/g" /etc/default/coturn
            invoke-rc.d coturn restart || true

            NGINX_STREAM_CONFIG="/etc/nginx/modules-enabled/60-jitsi-meet.conf"
            if [ -f $NGINX_STREAM_CONFIG ] && [ -f $NGINX_CONFIG ] ; then
                sed -i "s/listen 443 ssl/listen 4444 ssl http2/g" $NGINX_CONFIG
                sed -i "s/listen \[\:\:\]\:443 ssl/listen \[\:\:\]\:4444 ssl http2/g" $NGINX_CONFIG
                invoke-rc.d nginx reload || true
            fi

            # Enable turn server in config.js
            if [ -f $JITSI_MEET_CONFIG ] ; then
                sed -i "s/\/\/ useStunTurn: true/useStunTurn: true/g" $JITSI_MEET_CONFIG
            fi
        fi

        # and we're done with debconf
        db_stop
    ;;

    abort-upgrade|abort-remove|abort-deconfigure)
    ;;

    *)
        echo "postinst called with unknown argument \`$1'" >&2
        exit 1
    ;;
esac

# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.

#DEBHELPER#

exit 0