security: don't provide default passwords

Also check if they are not provided at sstartup time and fail to start
in that case.

env.example

@@ -1,3 +1,31 @@
+# Security
+#
+# Set these to strong passwords to avoid intruders from impersonating a service account
+# Here is how to generate a good password: openssl rand -hex 16
+# The service(s) won't start unless these are specified
+# You may skip the Jigasi and Jibri passwords if you are not using those
+# DO NOT reuse passwords
+#
+
+# XMPP component password for Jicofo
+JICOFO_COMPONENT_SECRET=
+
+# XMPP password for Jicofo client connections
+JICOFO_AUTH_PASSWORD=
+
+# XMPP password for JVB client connections
+JVB_AUTH_PASSWORD=
+
+# XMPP password for Jigasi MUC client connections
+JIGASI_XMPP_PASSWORD=
+
+# XMPP recorder password for Jibri client connections
+JIBRI_RECORDER_PASSWORD=
+
+# XMPP password for Jibri client connections
+JIBRI_XMPP_PASSWORD=
+
+
 #
 # Basic configuration options
 #
@@ -178,9 +206,6 @@ JVB_BREWERY_MUC=jvbbrewery
 # XMPP user for JVB client connections
 JVB_AUTH_USER=jvb
 
-# XMPP password for JVB client connections
-JVB_AUTH_PASSWORD=passw0rd
-
 # STUN servers used to discover the server's public IP
 JVB_STUN_SERVERS=meet-jit-si-turnrelay.jitsi.net:443
 
@@ -195,25 +220,16 @@ JVB_TCP_PORT=4443
 # See https://github.com/jitsi/jitsi-videobridge/blob/master/doc/rest.md for more information
 #JVB_ENABLE_APIS=rest,colibri
 
-# XMPP component password for Jicofo
-JICOFO_COMPONENT_SECRET=s3cr37
-
 # XMPP user for Jicofo client connections.
 # NOTE: this option doesn't currently work due to a bug
 JICOFO_AUTH_USER=focus
 
-# XMPP password for Jicofo client connections
-JICOFO_AUTH_PASSWORD=passw0rd
-
 # Base URL of Jicofo's reservation REST API
 #JICOFO_RESERVATION_REST_BASE_URL=http://reservation.example.com
 
 # XMPP user for Jigasi MUC client connections
 JIGASI_XMPP_USER=jigasi
 
-# XMPP password for Jigasi MUC client connections
-JIGASI_XMPP_PASSWORD=passw0rd
-
 # MUC name for the Jigasi pool
 JIGASI_BREWERY_MUC=jigasibrewery
 
@@ -267,9 +283,6 @@ XMPP_RECORDER_DOMAIN=recorder.meet.jitsi
 # XMPP recorder user for Jibri client connections
 JIBRI_RECORDER_USER=recorder
 
-# XMPP recorder password for Jibri client connections
-JIBRI_RECORDER_PASSWORD=passw0rd
-
 # Directory for recordings inside Jibri container
 JIBRI_RECORDING_DIR=/config/recordings
 
@@ -279,9 +292,6 @@ JIBRI_FINALIZE_RECORDING_SCRIPT_PATH=/config/finalize.sh
 # XMPP user for Jibri client connections
 JIBRI_XMPP_USER=jibri
 
-# XMPP password for Jibri client connections
-JIBRI_XMPP_PASSWORD=passw0rd
-
 # MUC name for the Jibri pool
 JIBRI_BREWERY_MUC=jibribrewery