env.example 7.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307
  1. #
  2. # Basic configuration options
  3. #
  4. # Directory where all configuration will be stored.
  5. CONFIG=~/.jitsi-meet-cfg
  6. # Exposed HTTP port.
  7. HTTP_PORT=8000
  8. # Exposed HTTPS port.
  9. HTTPS_PORT=8443
  10. # System time zone.
  11. TZ=Europe/Amsterdam
  12. # Public URL for the web service.
  13. #PUBLIC_URL=https://meet.example.com
  14. # IP address of the Docker host.
  15. # See the "Running behind NAT or on a LAN environment" section in the README.
  16. #DOCKER_HOST_ADDRESS=192.168.1.1
  17. #
  18. # Let's Encrypt configuration
  19. #
  20. # Enable Let's Encrypt certificate generation.
  21. #ENABLE_LETSENCRYPT=1
  22. # Domain for which to generate the certificate.
  23. #LETSENCRYPT_DOMAIN=meet.example.com
  24. # E-Mail for receiving important account notifications (mandatory).
  25. #LETSENCRYPT_EMAIL=alice@atlanta.net
  26. #
  27. # Etherpad integration (for document sharing)
  28. #
  29. # Set etherpad-lite URL (uncomment to enable).
  30. #ETHERPAD_URL_BASE=http://etherpad.meet.jitsi:9001
  31. #
  32. # Basic Jigasi configuration options (needed for SIP gateway support)
  33. #
  34. # SIP URI for incoming / outgoing calls.
  35. #JIGASI_SIP_URI=test@sip2sip.info
  36. # Password for the specified SIP account as a clear text
  37. #JIGASI_SIP_PASSWORD=passw0rd
  38. # SIP server (use the SIP account domain if in doubt).
  39. #JIGASI_SIP_SERVER=sip2sip.info
  40. # SIP server port
  41. #JIGASI_SIP_PORT=5060
  42. # SIP server transport
  43. #JIGASI_SIP_TRANSPORT=UDP
  44. #
  45. # Authentication configuration (see README for details)
  46. #
  47. # Enable authentication.
  48. #ENABLE_AUTH=1
  49. # Enable guest access.
  50. #ENABLE_GUESTS=1
  51. # Select authentication type: internal, jwt or ldap
  52. #AUTH_TYPE=internal
  53. # JWT authentication
  54. #
  55. # Application identifier.
  56. #JWT_APP_ID=my_jitsi_app_id
  57. # Application secret known only to your token.
  58. #JWT_APP_SECRET=my_jitsi_app_secret
  59. # (Optional) Set asap_accepted_issuers as a comma separated list.
  60. #JWT_ACCEPTED_ISSUERS=my_web_client,my_app_client
  61. # (Optional) Set asap_accepted_audiences as a comma separated list.
  62. #JWT_ACCEPTED_AUDIENCES=my_server1,my_server2
  63. # LDAP authentication (for more information see the Cyrus SASL saslauthd.conf man page)
  64. #
  65. # LDAP url for connection.
  66. #LDAP_URL=ldaps://ldap.domain.com/
  67. # LDAP base DN. Can be empty
  68. #LDAP_BASE=DC=example,DC=domain,DC=com
  69. # LDAP user DN. Do not specify this parameter for the anonymous bind.
  70. #LDAP_BINDDN=CN=binduser,OU=users,DC=example,DC=domain,DC=com
  71. # LDAP user password. Do not specify this parameter for the anonymous bind.
  72. #LDAP_BINDPW=LdapUserPassw0rd
  73. # LDAP filter. Tokens example:
  74. # %1-9 - if the input key is user@mail.domain.com, then %1 is com, %2 is domain and %3 is mail.
  75. # %s - %s is replaced by the complete service string.
  76. # %r - %r is replaced by the complete realm string.
  77. #LDAP_FILTER=(sAMAccountName=%u)
  78. # LDAP authentication method
  79. #LDAP_AUTH_METHOD=bind
  80. # LDAP version
  81. #LDAP_VERSION=3
  82. # LDAP TLS using
  83. #LDAP_USE_TLS=1
  84. # List of SSL/TLS ciphers to allow.
  85. #LDAP_TLS_CIPHERS=SECURE256:SECURE128:!AES-128-CBC:!ARCFOUR-128:!CAMELLIA-128-CBC:!3DES-CBC:!CAMELLIA-128-CBC
  86. # Require and verify server certificate
  87. #LDAP_TLS_CHECK_PEER=1
  88. # Path to CA cert file. Used when server sertificate verify is enabled.
  89. #LDAP_TLS_CACERT_FILE=/etc/ssl/certs/ca-certificates.crt
  90. # Path to CA certs directory. Used when server sertificate verify is enabled.
  91. #LDAP_TLS_CACERT_DIR=/etc/ssl/certs
  92. # Wether to use starttls, implies LDAPv3 and requires ldap:// instead of ldaps://
  93. # LDAP_START_TLS=1
  94. #
  95. # Advanced configuration options (you generally don't need to change these)
  96. #
  97. # Internal XMPP domain.
  98. XMPP_DOMAIN=meet.jitsi
  99. # Internal XMPP server
  100. XMPP_SERVER=xmpp.meet.jitsi
  101. # Internal XMPP server URL
  102. XMPP_BOSH_URL_BASE=http://xmpp.meet.jitsi:5280
  103. # Internal XMPP domain for authenticated services.
  104. XMPP_AUTH_DOMAIN=auth.meet.jitsi
  105. # XMPP domain for the MUC.
  106. XMPP_MUC_DOMAIN=muc.meet.jitsi
  107. # XMPP domain for the internal MUC used for jibri, jigasi and jvb pools.
  108. XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
  109. # XMPP domain for unauthenticated users.
  110. XMPP_GUEST_DOMAIN=guest.meet.jitsi
  111. # Custom Prosody modules for XMPP_DOMAIN (comma separated)
  112. XMPP_MODULES=
  113. # Custom Prosody modules for MUC component (comma separated)
  114. XMPP_MUC_MODULES=
  115. # Custom Prosody modules for internal MUC component (comma separated)
  116. XMPP_INTERNAL_MUC_MODULES=
  117. # MUC for the JVB pool.
  118. JVB_BREWERY_MUC=jvbbrewery
  119. # XMPP user for JVB client connections.
  120. JVB_AUTH_USER=jvb
  121. # XMPP password for JVB client connections.
  122. JVB_AUTH_PASSWORD=passw0rd
  123. # STUN servers used to discover the server's public IP.
  124. JVB_STUN_SERVERS=meet-jit-si-turnrelay.jitsi.net:443
  125. # Media port for the Jitsi Videobridge
  126. JVB_PORT=10000
  127. # TCP Fallback for Jitsi Videobridge for when UDP isn't available
  128. JVB_TCP_HARVESTER_DISABLED=true
  129. JVB_TCP_PORT=4443
  130. # A comma separated list of APIs to enable when the JVB is started. The default is none.
  131. # See https://github.com/jitsi/jitsi-videobridge/blob/master/doc/rest.md for more information
  132. #JVB_ENABLE_APIS=rest,colibri
  133. # XMPP component password for Jicofo.
  134. JICOFO_COMPONENT_SECRET=s3cr37
  135. # XMPP user for Jicofo client connections. NOTE: this option doesn't currently work due to a bug.
  136. JICOFO_AUTH_USER=focus
  137. # XMPP password for Jicofo client connections.
  138. JICOFO_AUTH_PASSWORD=passw0rd
  139. # Base URL of Jicofo's reservation REST API
  140. #JICOFO_RESERVATION_REST_BASE_URL=http://reservation.example.com
  141. # XMPP user for Jigasi MUC client connections.
  142. JIGASI_XMPP_USER=jigasi
  143. # XMPP password for Jigasi MUC client connections.
  144. JIGASI_XMPP_PASSWORD=passw0rd
  145. # MUC name for the Jigasi pool.
  146. JIGASI_BREWERY_MUC=jigasibrewery
  147. # Minimum port for media used by Jigasi.
  148. JIGASI_PORT_MIN=20000
  149. # Maximum port for media used by Jigasi.
  150. JIGASI_PORT_MAX=20050
  151. # Enable SDES srtp
  152. #JIGASI_ENABLE_SDES_SRTP=1
  153. # Keepalive method
  154. #JIGASI_SIP_KEEP_ALIVE_METHOD=OPTIONS
  155. # Health-check extension
  156. #JIGASI_HEALTH_CHECK_SIP_URI=keepalive
  157. # Health-check interval
  158. #JIGASI_HEALTH_CHECK_INTERVAL=300000
  159. #
  160. # Enable Jigasi transcription.
  161. #ENABLE_TRANSCRIPTIONS=1
  162. # Jigasi will record audio when transcriber is on. Default false.
  163. #JIGASI_TRANSCRIBER_RECORD_AUDIO=true
  164. # Jigasi will send transcribed text to the chat when transcriber is on. Default false.
  165. #JIGASI_TRANSCRIBER_SEND_TXT=true
  166. # Jigasi will post an url to the chat with transcription file. Default false.
  167. #JIGASI_TRANSCRIBER_ADVERTISE_URL=true
  168. # Credentials for connect to Cloud Google API from Jigasi
  169. # Please read https://cloud.google.com/text-to-speech/docs/quickstart-protocol section "Before you begin" paragraph 1 to 5.
  170. # Copy the values from the json to the related env vars
  171. #GC_PROJECT_ID=
  172. #GC_PRIVATE_KEY_ID=
  173. #GC_PRIVATE_KEY=
  174. #GC_CLIENT_EMAIL=
  175. #GC_CLIENT_ID=
  176. #GC_CLIENT_CERT_URL=
  177. # Enable recording
  178. #ENABLE_RECORDING=1
  179. # XMPP domain for the jibri recorder
  180. XMPP_RECORDER_DOMAIN=recorder.meet.jitsi
  181. # XMPP recorder user for Jibri client connections.
  182. JIBRI_RECORDER_USER=recorder
  183. # XMPP recorder password for Jibri client connections.
  184. JIBRI_RECORDER_PASSWORD=passw0rd
  185. # Directory for recordings inside Jibri container.
  186. JIBRI_RECORDING_DIR=/config/recordings
  187. # The finalizing script. Will run after recording is complete.
  188. JIBRI_FINALIZE_RECORDING_SCRIPT_PATH=/config/finalize.sh
  189. # XMPP user for Jibri client connections.
  190. JIBRI_XMPP_USER=jibri
  191. # XMPP password for Jibri client connections.
  192. JIBRI_XMPP_PASSWORD=passw0rd
  193. # MUC name for the Jibri pool.
  194. JIBRI_BREWERY_MUC=jibribrewery
  195. # MUC connection timeout
  196. JIBRI_PENDING_TIMEOUT=90
  197. # When jibri gets a request to start a service for a room, the room
  198. # jid will look like: roomName@optional.prefixes.subdomain.xmpp_domain
  199. # We'll build the url for the call by transforming that into:
  200. # https://xmpp_domain/subdomain/roomName
  201. # So if there are any prefixes in the jid (like jitsi meet, which
  202. # has its participants join a muc at conference.xmpp_domain) then
  203. # list that prefix here so it can be stripped out to generate
  204. # the call url correctly.
  205. JIBRI_STRIP_DOMAIN_JID=muc
  206. # Directory for logs inside Jibri container.
  207. JIBRI_LOGS_DIR=/config/logs
  208. # Disable HTTPS. Handle TLS connections outside of this setup.
  209. #DISABLE_HTTPS=1
  210. # Redirect HTTP traffic to HTTPS.
  211. # Necessary for Let's Encrypt. Relies on standard HTTPS port (443).
  212. #ENABLE_HTTP_REDIRECT=1