Commit Graph

38 Commits

Author SHA1 Message Date
Дамян Минков ffdd4f2eed
debian: updates around coturn package and order of install (#5729)
* debian: Update coturn udp port to non-privileged one.

* debian: Turnserver config requires jitsi-meet-web-config files.

* doc: Updates doc, removing `--no-install-recommends`.

* debian: Moves checks and configs to default to prosody 0.11.

* debian: Disable room locking on internal muc.

* add scripts for deploying coturn with certbot

* turnserver: Removes unused variable showing error.

* debian: updates let's encrypt and coturn scripts.

* debian: Detect failure to retrieve external ip address.

* debian: Always configure turn when the turnserver package is installed.

Co-authored-by: Julien Fastré <julien.fastre@champs-libres.coop>
2020-04-08 13:06:49 -05:00
bgrozev 36113fd54f
debian: clean up password generation, use 16 characters 2020-04-06 10:22:56 +02:00
Saúl Ibarra Corretgé 94f7b570d7 debian: fix creating internal MUC 2020-03-30 17:01:27 -05:00
Дамян Минков c73ba37202
Introduces installing coturn as turn server for jitsi-meet (#4959)
* Adds package that can configure using turnserver for jitsi-meet.

Activates http2 on the nginx host and uses the alpn send with the web requests to multiplex traffic to be served as web of proxied to the turn server.
It needs nginx at least v1.13.10.
Adds turncredentials module from Philipp Hancke, with small modification (all int values for hosts need to be strings/tostring()) in order to be able to use the module with prosody 0.11.

* Moves loading of stream after loading stream module (50-..).

* Leaves DISABLE_TCP_HARVESTER to be handled by jvb.

* Fixes comments.

* Properly detect first time coturn install and configure it.

* Handles upgrading from jetty serving web.

* Does not create jvb user if already exists.

* Fixes let's encrypt and adds turnserver handling.

* Enables use of turn server in config.js if available.

* Adds a check whether prosody config exists.

There are cases where deployments can still have configured prosody in the main prosody config in /etc/prosody.
2020-01-09 16:51:27 +00:00
damencho d9282f873c Migrate to using mucs for jvb. 2020-01-08 11:18:36 +00:00
damencho 4d0cbff5a1 Ignore errors when restarting services.
Sometimes conflicting or wrong configuration can leave the package in broken state and users cannot even uninstall/purge the packages, and it also breaks any other package installation.
2019-12-04 17:21:12 +00:00
damencho 339e1c5fab Moves config template files out of doc folder. 2019-12-04 09:50:55 +00:00
damencho 4f6a0d7d3a Updates config if prosody 0.10 is used. 2019-04-29 15:24:55 +01:00
damencho 69a12395d2 Removes debug log and adds safety check whether config exists. 2019-04-16 21:16:38 +02:00
damencho ea54713f9a Supports prosody 0.11 when configuring.
Doing few changes needed for general config and for tokens.
2019-04-05 17:18:17 +02:00
Дамян Минков 2ee8f1ef58 Updates postinst prosody (#2896)
* Creates conf.d in /etc/prosody if missing.

Fixes a problem installing prosody 0.10 when using prosody repositories.

* Cleanups certificates on purge.

There are various occasions where users purge packages and the new installations after that generate certificate which doesn't end up in the java trust store on the target machine.

* Generate jicofo user and component passwords if missing.

There are situations where if prosody is already installed, the order of configuring the packages is not in the correct order. In those situations jitsi-meet-prosody got configured before jicofo and the user password and the component secret are not available and we ask the user for that and later when jicofo is configured we generate new set of them. Now we will end up always generating them in jitsi-meet-prosody or jicofo and we will reuse them. See https://github.com/jitsi/jicofo/pull/283.
2018-04-30 15:19:30 -07:00
Saúl Ibarra Corretgé ff8386e931 debian: fix setting the auth domain certificates
In 94813bc0fd (diff-6e9552c9bd8e61c8f277c21220160234)
two local variables got removed (AUTH_KEY_FILE and AUTH_CRT_FILE), which are used by the sed command
below to configure the virtualhost for auth.
2018-03-11 16:05:14 -05:00
damencho 5a3f952a2f Uses prosodyctl default inputs. 2017-12-07 11:14:21 -06:00
damencho 94813bc0fd Changes owner to prosody of newly created certificates. Fixes #2244. 2017-12-07 11:14:21 -06:00
damencho 64b11b571f Fixes error in case prosody host config is missing in conf.d folder. 2017-10-13 08:43:00 -05:00
damencho 3e1cd6151d Updates prosody config to have certificates for the auth. domain.
The certificates are generated on new install or upgrade and added to the current configuration and also to the trusted certificates on the local machine.
2017-10-06 16:51:30 -05:00
damencho 8da0d3a1f1 Removes dependencies to other components.
Now the web app can be installed separately from jicofo and jitsi-videobridge, or can be installed on machine running nginx or apache. Currently only nginx will be configured and apache config is left to user. Later we can add and the apache config. Renames jitsi-meet to jitsi-meet-web (just the web content) and jitsi-meet-web-config (configuring jetty, nginx or apache). A new jitsi-meet package will be introduced, a meta package depending on jicofo, jvb and the current packages.
2016-11-28 13:13:08 -06:00
Damian Minkov a093b455b3 Fixes debian packaging checking wrong template. 2015-03-26 13:19:50 +02:00
Damian Minkov bc5565251c Removes some links when reconfiguring. 2015-03-21 14:18:11 +02:00
Damian Minkov eec513e9e3 Adds admins line after muc component. 2015-02-12 13:50:21 +02:00
Damian Minkov b3a4b8a1cf Fixes configuring prosody which can break also jicofo configuration, the missing domain will fail later creating admin account for jicofo. 2014-12-17 09:40:45 +02:00
Damian Minkov ba627718be Creates prosody conf.avail if missing. 2014-12-16 17:01:14 +02:00
paweldomas 36065b935c Old prosody config improvement - patch by Damian Minkov. 2014-12-05 14:04:15 +01:00
paweldomas 91c3c9ca83 Restarts jvb and jicofo on upgrade. 2014-12-04 12:40:13 +01:00
paweldomas f749bed1dd Adds jicofo debian package integration. 2014-12-02 20:11:54 +01:00
Damian Minkov c5bf2f86ca Fixes purge jitsi-meet-prosody (missing debconf configs). 2014-11-17 12:16:34 +02:00
Damian Minkov 1602af0229 Migrates jitsi-videobridge config file. 2014-10-23 16:38:59 +03:00
Damian Minkov ee324cf41f Adds prosody config to conf.avail and enable it in conf.d so we don't wipe prosody config on installing meet. 2014-10-23 11:14:53 +03:00
Damian Minkov e1ce5ae283 Fixes detecting whether prosody was newly configured on update/install. 2014-09-29 18:00:20 +03:00
Damian Minkov 750c4f6cf8 Fixes initial connect of jitsi videobridge after configuring prosody. 2014-09-17 16:52:20 +03:00
Damian Minkov 02d283208b Fixes prosody config extract. 2014-09-05 16:11:53 +03:00
Damian Minkov 427d6708ad Fixes prosody config extract. 2014-09-05 15:59:57 +03:00
Damian Minkov 0680df56fd Changes default prosody config to be plain file, changes dependencies. 2014-09-05 15:24:58 +03:00
Damian Minkov bd543c4b75 Fixes errors in postinst, not using our template and error about grep test. 2014-09-04 12:00:12 +03:00
Damian Minkov 9d98b3a29e Does not override prosody config on update. 2014-08-29 12:53:42 +03:00
Damian Minkov c06c1caad8 Updates deb package scripts. 2014-08-26 16:44:04 +03:00
Damian Minkov d9497f28b5 Fixed wrong -out parameter for generating certificates, reported on the mailinglist. 2014-08-14 10:21:51 +03:00
turint e200eacf09 Ads debian folder for packaging two debs, jitsi-meet and jitsi-meet-prosody. 2014-08-10 22:29:48 +03:00