Interanet/jitsi-meet-deployment
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

prosody: enable limits

Browse Source 
* feat: Enables limits with default values from upstream.

* feat: Enables limits_exception module and adding jicofo and jvb.

Removes the limits for the jicofo and jvb connections.
This commit is contained in:
Дамян Минков
2021-06-07 13:09:26 -05:00
committed by GitHub
parent db3d790e52
commit 6f6fe7717c
2 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
prosody/rootfs/defaults/conf.d/jitsi-meet.cfg.lua
View File

@@ -3,6 +3,11 @@ admins = {
"{{ .Env.JVB_AUTH_USER }}@{{ .Env.XMPP_AUTH_DOMAIN }}" "{{ .Env.JVB_AUTH_USER }}@{{ .Env.XMPP_AUTH_DOMAIN }}"
} }
unlimited_jids = {
"{{ .Env.JICOFO_AUTH_USER }}@{{ .Env.XMPP_AUTH_DOMAIN }}",
"{{ .Env.JVB_AUTH_USER }}@{{ .Env.XMPP_AUTH_DOMAIN }}"
}
plugin_paths = { "/prosody-plugins/", "/prosody-plugins-custom" } plugin_paths = { "/prosody-plugins/", "/prosody-plugins-custom" }
http_default_host = "{{ .Env.XMPP_DOMAIN }}" http_default_host = "{{ .Env.XMPP_DOMAIN }}"
@@ -130,6 +135,9 @@ VirtualHost "{{ .Env.XMPP_AUTH_DOMAIN }}"
key = "/config/certs/{{ .Env.XMPP_AUTH_DOMAIN }}.key"; key = "/config/certs/{{ .Env.XMPP_AUTH_DOMAIN }}.key";
certificate = "/config/certs/{{ .Env.XMPP_AUTH_DOMAIN }}.crt"; certificate = "/config/certs/{{ .Env.XMPP_AUTH_DOMAIN }}.crt";
} }
modules_enabled = {
"limits_exception";
}
authentication = "internal_hashed" authentication = "internal_hashed"
{{ if .Env.XMPP_RECORDER_DOMAIN }} {{ if .Env.XMPP_RECORDER_DOMAIN }}

11
prosody/rootfs/defaults/prosody.cfg.lua
View File

@@ -43,6 +43,7 @@ modules_enabled = {
-- Not essential, but recommended -- Not essential, but recommended
"private"; -- Private XML storage (for room bookmarks, etc.) "private"; -- Private XML storage (for room bookmarks, etc.)
"vcard"; -- Allow users to set vCards "vcard"; -- Allow users to set vCards
"limits"; -- Enable bandwidth limiting for XMPP connections
-- These are commented by default as they have a performance impact -- These are commented by default as they have a performance impact
--"privacy"; -- Support privacy lists --"privacy"; -- Support privacy lists
@@ -93,6 +94,16 @@ allow_registration = false;
daemonize = false; daemonize = false;
-- Enable rate limits for incoming client and server connections
limits = {
c2s = {
rate = "10kb/s";
};
s2sin = {
rate = "30kb/s";
};
}
pidfile = "/config/data/prosody.pid"; pidfile = "/config/data/prosody.pid";
-- Force clients to use encrypted connections? This option will -- Force clients to use encrypted connections? This option will