env.example 5.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213
  1. #
  2. # Basic configuration options
  3. #
  4. # Directory where all configuration will be stored.
  5. CONFIG=~/.jitsi-meet-cfg
  6. # Exposed HTTP port.
  7. HTTP_PORT=8000
  8. # Exposed HTTPS port.
  9. HTTPS_PORT=8443
  10. # System time zone.
  11. TZ=Europe/Amsterdam
  12. # IP address of the Docker host. See the "Running on a LAN environment" section
  13. # in the README.
  14. #DOCKER_HOST_ADDRESS=192.168.1.1
  15. #
  16. # Let's Encrypt configuration
  17. #
  18. # Enable Let's Encrypt certificate generation.
  19. #ENABLE_LETSENCRYPT=1
  20. # Domain for which to generate the certificate.
  21. #LETSENCRYPT_DOMAIN=meet.example.com
  22. # E-Mail for receiving important account notifications (mandatory).
  23. #LETSENCRYPT_EMAIL=alice@atlanta.net
  24. #
  25. # Basic Jigasi configuration options (needed for SIP gateway support)
  26. #
  27. # SIP URI for incoming / outgoing calls.
  28. #JIGASI_SIP_URI=test@sip2sip.info
  29. # Password for the specified SIP account as a clear text
  30. #JIGASI_SIP_PASSWORD=passw0rd
  31. # SIP server (use the SIP account domain if in doubt).
  32. #JIGASI_SIP_SERVER=sip2sip.info
  33. # SIP server port
  34. #JIGASI_SIP_PORT=5060
  35. # SIP server transport
  36. #JIGASI_SIP_TRANSPORT=UDP
  37. #
  38. # Authentication configuration (see README for details)
  39. #
  40. # Enable authentication.
  41. #ENABLE_AUTH=1
  42. # Enable guest access.
  43. #ENABLE_GUESTS=1
  44. # Enable authentication via JWT tokens.
  45. #JWT_ENABLE_TOKEN_AUTH=1
  46. # Application identifier.
  47. #JWT_APP_ID=my_jitsi_app_id
  48. # Application secret known only to your token.
  49. #JWT_APP_SECRET=my_jitsi_app_secret
  50. # (Optional) Set asap_accepted_issuers as a comma separated list.
  51. #JWT_ACCEPTED_ISSUERS=my_web_client,my_app_client
  52. # (Optional) Set asap_accepted_audiences as a comma separated list.
  53. #JWT_ACCEPTED_AUDIENCES=my_server1,my_server2
  54. #
  55. # Advanced configuration options (you generally don't need to change these)
  56. #
  57. # Enable LDAP authentication in prosody via SASL mechanism.
  58. # Note: turn on ENABLE_AUTH for get it work.
  59. #ENABLE_LDAP_AUTH=1
  60. ###################### LDAP settings ############################
  61. # for detail information please see Cyrus SASL saslauthd.conf man page
  62. # LDAP url for connection.
  63. #LDAP_URL=ldaps://ldap.domain.com/
  64. # LDAP base DN. Can be empty
  65. #LDAP_BASE=DC=example,DC=domain,DC=com
  66. # LDAP user DN. Do not specify this parameter for the anonymous bind.
  67. #LDAP_BINDDN=CN=binduser,OU=users,DC=example,DC=domain,DC=com
  68. # LDAP user password. Do not specify this parameter for the anonymous bind.
  69. #LDAP_BINDPW=LdapUserPassw0rd
  70. # LDAP filter. Tokens example:
  71. # %1-9 - if the input key is user@mail.domain.com, then %1 is com, %2 is domain and %3 is mail.
  72. # %s - %s is replaced by the complete service string.
  73. # %r - %r is replaced by the complete realm string.
  74. #LDAP_FILTER=(sAMAccountName=%u)
  75. # LDAP authentication method
  76. #LDAP_AUTH_METHOD=bind
  77. # LDAP version
  78. #LDAP_VERSION=3
  79. # LDAP TLS using
  80. #LDAP_USE_TLS=1
  81. # List of SSL/TLS ciphers to allow.
  82. #LDAP_TLS_CIPHERS=SECURE256:SECURE128:!AES-128-CBC:!ARCFOUR-128:!CAMELLIA-128-CBC:!3DES-CBC:!CAMELLIA-128-CBC
  83. # Require and verify server certificate
  84. #LDAP_TLS_CHECK_PEER=1
  85. # Path to CA cert file. Used when server sertificate verify is enabled.
  86. #LDAP_TLS_CACERT_FILE=/etc/ssl/certs/ca-certificates.crt
  87. # Path to CA certs directory. Used when server sertificate verify is enabled.
  88. #LDAP_TLS_CACERT_DIR=/etc/ssl/certs
  89. #################################################################
  90. # Internal XMPP domain.
  91. XMPP_DOMAIN=meet.jitsi
  92. # Internal XMPP server
  93. XMPP_SERVER=xmpp.meet.jitsi
  94. # Internal XMPP server URL
  95. XMPP_BOSH_URL_BASE=http://xmpp.meet.jitsi:5280
  96. # Internal XMPP domain for authenticated services.
  97. XMPP_AUTH_DOMAIN=auth.meet.jitsi
  98. # XMPP domain for the MUC.
  99. XMPP_MUC_DOMAIN=muc.meet.jitsi
  100. # XMPP domain for the internal MUC used for jibri, jigasi and jvb pools.
  101. XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
  102. # XMPP domain for unauthenticated users.
  103. XMPP_GUEST_DOMAIN=guest.meet.jitsi
  104. # Custom Prosody modules for XMPP_DOMAIN (comma separated)
  105. XMPP_MODULES=
  106. # Custom Prosody modules for MUC component (comma separated)
  107. XMPP_MUC_MODULES=
  108. # Custom Prosody modules for internal MUC component (comma separated)
  109. XMPP_INTERNAL_MUC_MODULES=
  110. # MUC for the JVB pool.
  111. JVB_BREWERY_MUC=jvbbrewery
  112. # XMPP user for JVB client connections.
  113. JVB_AUTH_USER=jvb
  114. # XMPP password for JVB client connections.
  115. JVB_AUTH_PASSWORD=passw0rd
  116. # STUN servers used to discover the server's public IP.
  117. JVB_STUN_SERVERS=stun.l.google.com:19302,stun1.l.google.com:19302,stun2.l.google.com:19302
  118. # Media port for the Jitsi Videobridge
  119. JVB_PORT=10000
  120. # TCP Fallback for Jitsi Videobridge for when UDP isn't available
  121. JVB_TCP_HARVESTER_DISABLED=true
  122. JVB_TCP_PORT=4443
  123. # A comma separated list of APIs to enable when the JVB is started. The default is none.
  124. # See https://github.com/jitsi/jitsi-videobridge/blob/master/doc/rest.md for more information
  125. #JVB_ENABLE_APIS=rest,colibri
  126. # XMPP component password for Jicofo.
  127. JICOFO_COMPONENT_SECRET=s3cr37
  128. # XMPP user for Jicofo client connections. NOTE: this option doesn't currently work due to a bug.
  129. JICOFO_AUTH_USER=focus
  130. # XMPP password for Jicofo client connections.
  131. JICOFO_AUTH_PASSWORD=passw0rd
  132. # XMPP user for Jigasi MUC client connections.
  133. JIGASI_XMPP_USER=jigasi
  134. # XMPP password for Jigasi MUC client connections.
  135. JIGASI_XMPP_PASSWORD=passw0rd
  136. # MUC name for the Jigasi pool.
  137. JIGASI_BREWERY_MUC=jigasibrewery
  138. # Minimum port for media used by Jigasi.
  139. JIGASI_PORT_MIN=20000
  140. # Maximum port for media used by Jigasi.
  141. JIGASI_PORT_MAX=20050
  142. # Disable HTTPS. This can be useful if TLS connections are going to be handled outside of this setup.
  143. #DISABLE_HTTPS=1
  144. # Redirects HTTP traffic to HTTPS. Only works with the standard HTTPS port (443).
  145. #ENABLE_HTTP_REDIRECT=1