misc: move security options in sample file

This commit is contained in:
Saúl Ibarra Corretgé
2022-05-30 16:11:49 +02:00
parent 2a23095cc4
commit 902a67337e

View File

@@ -11,31 +11,6 @@
################################################################################ ################################################################################
# Security
#
# Set these to strong passwords to avoid intruders from impersonating a service account
# The service(s) won't start unless these are specified
# Running ./gen-passwords.sh will update .env with strong passwords
# You may skip the Jigasi and Jibri passwords if you are not using those
# DO NOT reuse passwords
#
# XMPP password for Jicofo client connections
JICOFO_AUTH_PASSWORD=
# XMPP password for JVB client connections
JVB_AUTH_PASSWORD=
# XMPP password for Jigasi MUC client connections
JIGASI_XMPP_PASSWORD=
# XMPP recorder password for Jibri client connections
JIBRI_RECORDER_PASSWORD=
# XMPP password for Jibri client connections
JIBRI_XMPP_PASSWORD=
# #
# Basic configuration options # Basic configuration options
# #
@@ -60,6 +35,7 @@ TZ=UTC
# https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker#running-behind-nat-or-on-a-lan-environment # https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker#running-behind-nat-or-on-a-lan-environment
#DOCKER_HOST_ADDRESS=192.168.1.1 #DOCKER_HOST_ADDRESS=192.168.1.1
# #
# Let's Encrypt configuration # Let's Encrypt configuration
# #
@@ -119,6 +95,7 @@ ETHERPAD_SKIN_VARIANTS="super-light-toolbar super-light-editor light-background
# SIP server transport # SIP server transport
#JIGASI_SIP_TRANSPORT=UDP #JIGASI_SIP_TRANSPORT=UDP
# #
# Authentication configuration (see handbook for details) # Authentication configuration (see handbook for details)
# #
@@ -147,7 +124,6 @@ ETHERPAD_SKIN_VARIANTS="super-light-toolbar super-light-editor light-background
# (Optional) Set asap_accepted_audiences as a comma separated list # (Optional) Set asap_accepted_audiences as a comma separated list
#JWT_ACCEPTED_AUDIENCES=my_server1,my_server2 #JWT_ACCEPTED_AUDIENCES=my_server1,my_server2
# LDAP authentication (for more information see the Cyrus SASL saslauthd.conf man page) # LDAP authentication (for more information see the Cyrus SASL saslauthd.conf man page)
# #
@@ -195,3 +171,30 @@ ETHERPAD_SKIN_VARIANTS="super-light-toolbar super-light-editor light-background
# Container restart policy # Container restart policy
RESTART_POLICY=unless-stopped RESTART_POLICY=unless-stopped
#
# Security
#
# Set these to strong passwords to avoid intruders from impersonating a service account
# The service(s) won't start unless these are specified
# Running ./gen-passwords.sh will update .env with strong passwords
# You may skip the Jigasi and Jibri passwords if you are not using those
# DO NOT reuse passwords
#
# XMPP password for Jicofo client connections
JICOFO_AUTH_PASSWORD=
# XMPP password for JVB client connections
JVB_AUTH_PASSWORD=
# XMPP password for Jigasi MUC client connections
JIGASI_XMPP_PASSWORD=
# XMPP recorder password for Jibri client connections
JIBRI_RECORDER_PASSWORD=
# XMPP password for Jibri client connections
JIBRI_XMPP_PASSWORD=