10-config 2.4 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879
  1. #!/usr/bin/with-contenv bash
  2. # make our folders
  3. mkdir -p \
  4. /config/{nginx/site-confs,keys} \
  5. /run \
  6. /var/lib/nginx/tmp/client_body \
  7. /var/tmp/nginx
  8. # generate keys (maybe)
  9. if [[ $ENABLE_LETSENCRYPT -eq 1 ]]; then
  10. if [[ ! -f /etc/letsencrypt/live/$LETSENCRYPT_DOMAIN/fullchain.pem ]]; then
  11. certbot certonly \
  12. --noninteractive \
  13. --standalone \
  14. --preferred-challenges http \
  15. -d $LETSENCRYPT_DOMAIN \
  16. --agree-tos \
  17. --email $LETSENCRYPT_EMAIL
  18. cp /defaults/letsencrypt-renew /etc/cron.monthly/
  19. fi
  20. else
  21. # use self-signed certs
  22. if [[ -f /config/keys/cert.key && -f /config/keys/cert.crt ]]; then
  23. echo "using keys found in /config/keys"
  24. else
  25. echo "generating self-signed keys in /config/keys, you can replace these with your own keys if required"
  26. SUBJECT="/C=US/ST=TX/L=Austin/O=jitsi.org/OU=Jitsi Server/CN=*"
  27. openssl req -new -x509 -days 3650 -nodes -out /config/keys/cert.crt -keyout /config/keys/cert.key -subj "$SUBJECT"
  28. fi
  29. fi
  30. # copy config files
  31. if [[ ! -f /config/nginx/nginx.conf ]]; then
  32. cp /defaults/nginx.conf /config/nginx/nginx.conf
  33. fi
  34. if [[ ! -f /config/nginx/meet.conf ]]; then
  35. tpl /defaults/meet.conf > /config/nginx/meet.conf
  36. fi
  37. if [[ ! -f /config/nginx/ssl.conf ]]; then
  38. tpl /defaults/ssl.conf > /config/nginx/ssl.conf
  39. fi
  40. if [ ! -f "/config/nginx/dhparams.pem" ]; then
  41. openssl dhparam -out /config/nginx/dhparams.pem 2048
  42. fi
  43. if [[ ! -f /config/nginx/site-confs/default ]]; then
  44. cp /defaults/default /config/nginx/site-confs/default
  45. fi
  46. if [[ ! -f /config/config.js ]]; then
  47. cp /defaults/config.js /config/config.js
  48. sed -i \
  49. -e "s#jitsi-meet.example.com#$XMPP_DOMAIN#g" \
  50. -e "s#bosh:.*#bosh: '/http-bind',#" \
  51. -e "s#muc:.*#muc: '${XMPP_MUC_DOMAIN}',#" \
  52. -e "s#// focusUserJid:.*#focusUserJid: '${JICOFO_AUTH_USER}@${XMPP_AUTH_DOMAIN}',#" \
  53. /config/config.js
  54. if [[ $ENABLE_AUTH -eq 1 ]]; then
  55. if [[ $ENABLE_GUESTS -eq 1 ]]; then
  56. sed -i \
  57. -e "s#// anonymousdomain:.*#anonymousdomain: '${XMPP_GUEST_DOMAIN}',#" \
  58. /config/config.js
  59. fi
  60. sed -i \
  61. -e "s#// authdomain:.*#authdomain: '${XMPP_DOMAIN}',#" \
  62. /config/config.js
  63. fi
  64. fi
  65. if [[ ! -f /config/interface_config.js ]]; then
  66. cp /defaults/interface_config.js /config/interface_config.js
  67. fi