Commit Graph

79 Commits

Author SHA1 Message Date
Jean Prunneaux
014aa59d37 web: add default language variable 2021-04-18 16:21:19 +02:00
Lukas1818
5c32833b04 web: add start environment variables
START_WITH_AUDIO_MUTED; START_SILENT; START_WITH_VIDEO_MUTED
2021-04-17 22:28:37 +02:00
Prayag Singh
0cbe0d9801 web: add a env variable to enable/disable deep linking 2021-04-15 13:55:18 +02:00
Prayag Singh
78699fe65a web: allow to configure shard name using env variable 2021-04-15 11:38:56 +02:00
Saúl Ibarra Corretgé
e1cebcc253 web,jvb: add ability to disable web sockets for colibri
The fallback is to use SCTP datachannels. This is not recomended.
2021-04-01 15:24:32 +02:00
Saúl Ibarra Corretgé
d27336bece web: always try to renew cert on container boot
acme.sh is smart enough to not send the request out unless it's necessary.
2021-04-01 15:15:53 +02:00
Saúl Ibarra Corretgé
73acbade59 web: remove deprecated config option 2021-04-01 15:15:53 +02:00
Mathieu
cb4d9413b7 web: removed duplicate host headers
Fixes: https://github.com/jitsi/docker-jitsi-meet/issues/568
2021-03-31 12:30:08 +02:00
Daniel Trierweiler
c4fc3d37c6 web: make a custom interface config possible 2021-03-10 14:19:20 +01:00
Kevin Conway
b45b505980 web: always install acme.sh when container starts
The previous version only installed acme.sh if it was not previously
installed. However, the check for a previous installation was based on
the existence of /config/acme.sh/acme.sh which is in the
external/persisted storage. The result was that acme.sh installation
would be skipped even for a new build of the web container if the
installation had been run on any previous build of the container. When
the web container is rebuilt, such as during an upgrade to a new stable
version, the new container would lack the cron job needed to
automatically updated the TLS certificates. Additionally, the version of
acme.sh installed in /config/acme.sh would never update even if the
pinned version in the Dockerfile was changed.

This patch sets the init script to always re-install acme.sh on
container start. The cron job installation from acme.sh is guarded by a
check for an existing job so there is no duplication. Re-installing also
has the effect of replacing the persisted /config/acme.sh/acme.sh with
the latest version set in the Dockerfile during upgrades.
2021-03-09 12:39:12 +01:00
Ludovic Muller
86c302258d web: brandingDataUrl -> dynamicBrandingUrl 2021-02-05 11:17:20 +01:00
Saúl Ibarra Corretgé
493cbdd406 misc: fix typo 2021-02-03 15:37:00 +01:00
spprod35
e12d7f2b55 web : Add DESKTOP_SHARING_FRAMERATE_MIN and MAX env vars 2021-02-03 14:57:07 +01:00
Cosmo Myzrail Gorynych aka CoMiGo
0b2514101c web: Add ENABLE_HSTS flag to disable strict-transport-security header 2020-12-17 09:32:54 +01:00
shanehughes1990
f8560371f5 web: add more config options 2020-12-16 14:42:40 +01:00
karniemi
eedac14370 web: add ability to disable IPv6 2020-12-09 16:35:21 +01:00
Mark
6a4887d7fc web: use env variables to set worker processes and connections
Use 2 new environment variables to allow setting the number of nginx worker processes and connections. Add the variables to the docker-compose file and to the nginx-conf where default values are also set.
2020-12-09 00:30:57 +01:00
Saúl Ibarra Corretgé
700c04a629 web: properly handle acme.sh return codes
It exits with 2 in case a renew is not necessary.
2020-12-04 15:40:18 +01:00
Saúl Ibarra Corretgé
4cb181c1b2 web: install acme certs to persistent storage 2020-12-04 15:17:48 +01:00
Saúl Ibarra Corretgé
1d2c68a32f web: fix running acme.sh on the right home directory 2020-12-04 15:17:04 +01:00
Jonathan Lennox
b0cb4a1846 web: update TLS config to Mozilla security guidelines 2020-12-02 23:20:15 +01:00
Saúl Ibarra Corretgé
06012127e9 web: replace certbot with acme.sh
The former seems to be in a pretty bad state for usage with Debian based
containers:

- The Debian provided package is too old
- certbot-auto no longer works on Debian
- The recommended way of using snap is not Docker friendly

Thus, we are migrating to acme.sh, which has the advantage of also
making the web container slimmer.
2020-12-02 16:03:17 +01:00
mammo0
ba011900fb web: prevent s6 from restarting cron if it shouldn't be run 2020-12-02 12:58:19 +01:00
Felix Geyer
c36c4d02a7 web: always rebuild nginx configs on start 2020-11-27 21:31:20 +01:00
D3473R
6b69576c2f web: add ability to configure tokenAuthUrl 2020-11-19 12:43:26 +01:00
Saúl Ibarra Corretgé
465816b4eb web,prosody: turn on XMPP WebSocket by default 2020-10-29 21:57:54 +01:00
Jan-Otto Kröpke
d747bfbe6b web,prosody: add XMPP WebSocket / Stream Management support 2020-10-29 21:44:48 +01:00
Saúl Ibarra Corretgé
7ab45bbb37 web: add ability to configure prejoin page 2020-10-16 15:28:20 +02:00
Paul Tiedtke
b277926332 jvb: make colibri websocket endpoints dynamic for multiple jvbs 2020-10-16 15:08:20 +02:00
Saúl Ibarra Corretgé
991f695275 web: remove no longer needed settings
They default to true now and they have been removed.
2020-10-16 14:22:29 +02:00
Ludovic Muller
087f024fcb web: configure brandingDataUrl with env variables 2020-10-08 10:13:44 +02:00
NullIsNot0
a404653197 web: configure startAudioOnly using environment variable 2020-10-08 10:12:12 +02:00
Ludovic Muller
409cade8ec web: configure Matomo using environment variables 2020-10-08 10:09:38 +02:00
Ludovic Muller
5ceaf5fd02 web: add IPv6 support 2020-10-02 16:56:20 +02:00
Saúl Ibarra Corretgé
ad5625bb09 jvb: switch to WebSocket based bridge channels 2020-10-02 16:45:21 +02:00
Saúl Ibarra Corretgé
81103362b5 web: add ability to configure the nginx resolver 2020-10-02 16:45:21 +02:00
Aaron van Meerten
c149463823 web: build config.js on each boot
Co-authored-by: Saúl Ibarra Corretgé <saghul@jitsi.org>
2020-10-02 15:25:44 +02:00
Jakub Onderka
2a0120de8b web: set security headers also for non HTTPS
Fixes: #493
2020-07-22 17:23:23 +02:00
Nickolay V. Shmyrev
baed605569 web: fix removing closed captions button if transcription is enabled 2020-07-02 09:59:08 +02:00
Mathieu Brunot
edecacd0c0 etherpad: add ability to use a external server 2020-06-27 16:21:31 +02:00
Jakub Onderka
125775a737 web: fix WASM MIME type 2020-04-22 10:52:53 +02:00
Jakub Onderka
e70975e692 web: enable GZIP compression for more file types 2020-04-22 10:51:58 +02:00
Saúl Ibarra Corretgé
b039b29b7a web: use certbot-auto 2020-04-15 21:56:40 +02:00
Amin Vakil
b95c95de0e web: improve nginx configuration
* Enable http2 by default
* Disable server_tokens by default
2020-04-15 12:09:28 +02:00
Hanno Böck
dc46215600 web: remove DHE suites support
Ref: https://github.com/jitsi/docker-jitsi-meet/issues/433
2020-04-14 16:59:19 +02:00
Saúl Ibarra Corretgé
2c95ab7c9f web: revert using PUBLIC_URL for BOSH URL
This partially reverts
5e6faced4f

It was unnecessary, and created lot of trouble.
2020-04-14 11:17:05 +02:00
Saúl Ibarra Corretgé
5e6faced4f web: use PUBLIC_URL for etherpaad base and BOSH URLs 2020-03-28 15:40:25 +01:00
Saúl Ibarra Corretgé
655cf6be4a web,prosody,jvb: prepare for new stable release 2020-03-27 22:12:25 +01:00
Frank Sachsenheim
cd4a071ed4 web: check for certbot's success and exit in case of a failure 2020-03-24 22:45:55 +01:00
Timon Engelke
8fa9f942ac web: update nginx config from upstream 2020-03-24 09:02:48 +01:00