jitsi-meet.cfg.lua 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470
  1. {{ $AUTH_TYPE := .Env.AUTH_TYPE | default "internal" -}}
  2. {{ $C2S_REQUIRE_ENCRYPTION := .Env.PROSODY_C2S_REQUIRE_ENCRYPTION | default "1" | toBool -}}
  3. {{ $DISABLE_POLLS := .Env.DISABLE_POLLS | default "false" | toBool -}}
  4. {{ $ENABLE_APP_SECRET := .Env.JWT_APP_SECRET | default "false" | toBool -}}
  5. {{ $ENABLE_AUTH := .Env.ENABLE_AUTH | default "0" | toBool -}}
  6. {{ $ENABLE_AV_MODERATION := .Env.ENABLE_AV_MODERATION | default "true" | toBool -}}
  7. {{ $ENABLE_BREAKOUT_ROOMS := .Env.ENABLE_BREAKOUT_ROOMS | default "true" | toBool -}}
  8. {{ $ENABLE_END_CONFERENCE := .Env.ENABLE_END_CONFERENCE | default "true" | toBool -}}
  9. {{ $ENABLE_GUEST_DOMAIN := and $ENABLE_AUTH (.Env.ENABLE_GUESTS | default "0" | toBool) -}}
  10. {{ $ENABLE_JAAS_COMPONENTS := .Env.ENABLE_JAAS_COMPONENTS | default "0" | toBool -}}
  11. {{ $ENABLE_LOBBY := .Env.ENABLE_LOBBY | default "true" | toBool -}}
  12. {{ $ENABLE_RATE_LIMITS := .Env.PROSODY_ENABLE_RATE_LIMITS | default "0" | toBool -}}
  13. {{ $ENABLE_RECORDING := .Env.ENABLE_RECORDING | default "0" | toBool -}}
  14. {{ $ENABLE_RECORDING_METADATA := .Env.PROSODY_ENABLE_RECORDING_METADATA | default "1" | toBool -}}
  15. {{ $ENABLE_SUBDOMAINS := .Env.ENABLE_SUBDOMAINS | default "true" | toBool -}}
  16. {{ $ENABLE_TRANSCRIPTIONS := .Env.ENABLE_TRANSCRIPTIONS | default "0" | toBool -}}
  17. {{ $ENABLE_VISITORS := .Env.ENABLE_VISITORS | default "0" | toBool -}}
  18. {{ $ENABLE_XMPP_WEBSOCKET := .Env.ENABLE_XMPP_WEBSOCKET | default "1" | toBool -}}
  19. {{ $ENV := .Env -}}
  20. {{ $GUEST_AUTH_TYPE := .Env.PROSODY_GUEST_AUTH_TYPE | default "jitsi-anonymous" -}}
  21. {{ $JIBRI_RECORDER_USER := .Env.JIBRI_RECORDER_USER | default "recorder" -}}
  22. {{ $JIBRI_XMPP_USER := .Env.JIBRI_XMPP_USER | default "jibri" -}}
  23. {{ $JIGASI_TRANSCRIBER_USER := .Env.JIGASI_TRANSCRIBER_USER | default "transcriber" -}}
  24. {{ $JIGASI_XMPP_USER := .Env.JIGASI_XMPP_USER | default "jigasi" -}}
  25. {{ $JVB_AUTH_USER := .Env.JVB_AUTH_USER | default "jvb" -}}
  26. {{ $JWT_ALLOW_EMPTY := .Env.JWT_ALLOW_EMPTY | default "0" | toBool -}}
  27. {{ $JWT_ASAP_KEYSERVER := .Env.JWT_ASAP_KEYSERVER | default "" -}}
  28. {{ $JWT_AUTH_TYPE := .Env.JWT_AUTH_TYPE | default "token" -}}
  29. {{ $JWT_ENABLE_DOMAIN_VERIFICATION := .Env.JWT_ENABLE_DOMAIN_VERIFICATION | default "false" | toBool -}}
  30. {{ $JWT_TOKEN_AUTH_MODULE := .Env.JWT_TOKEN_AUTH_MODULE | default "token_verification" -}}
  31. {{ $MATRIX_LOBBY_BYPASS := .Env.MATRIX_LOBBY_BYPASS | default "0" | toBool -}}
  32. {{ $MATRIX_UVS_ISSUER := .Env.MATRIX_UVS_ISSUER | default "issuer" -}}
  33. {{ $MATRIX_UVS_SYNC_POWER_LEVELS := .Env.MATRIX_UVS_SYNC_POWER_LEVELS | default "0" | toBool -}}
  34. {{ $PROSODY_AUTH_TYPE := .Env.PROSODY_AUTH_TYPE | default $AUTH_TYPE -}}
  35. {{ $PROSODY_RESERVATION_ENABLED := .Env.PROSODY_RESERVATION_ENABLED | default "false" | toBool -}}
  36. {{ $PROSODY_RESERVATION_REST_BASE_URL := .Env.PROSODY_RESERVATION_REST_BASE_URL | default "" -}}
  37. {{ $PUBLIC_URL := .Env.PUBLIC_URL | default "https://localhost:8443" -}}
  38. {{ $PUBLIC_URL_DOMAIN := $PUBLIC_URL | trimPrefix "https://" | trimSuffix "/" -}}
  39. {{ $RATE_LIMIT_ALLOW_RANGES := .Env.PROSODY_RATE_LIMIT_ALLOW_RANGES | default "10.0.0.0/8" -}}
  40. {{ $RATE_LIMIT_CACHE_SIZE := .Env.PROSODY_RATE_LIMIT_CACHE_SIZE | default "10000" -}}
  41. {{ $RATE_LIMIT_LOGIN_RATE := .Env.PROSODY_RATE_LIMIT_LOGIN_RATE | default "3" -}}
  42. {{ $RATE_LIMIT_SESSION_RATE := .Env.PROSODY_RATE_LIMIT_SESSION_RATE | default "200" -}}
  43. {{ $RATE_LIMIT_TIMEOUT := .Env.PROSODY_RATE_LIMIT_TIMEOUT | default "60" -}}
  44. {{ $XMPP_AUTH_DOMAIN := .Env.XMPP_AUTH_DOMAIN | default "auth.meet.jitsi" -}}
  45. {{ $XMPP_DOMAIN := .Env.XMPP_DOMAIN | default "meet.jitsi" -}}
  46. {{ $XMPP_GUEST_DOMAIN := .Env.XMPP_GUEST_DOMAIN | default "guest.meet.jitsi" -}}
  47. {{ $XMPP_INTERNAL_MUC_DOMAIN := .Env.XMPP_INTERNAL_MUC_DOMAIN | default "internal-muc.meet.jitsi" -}}
  48. {{ $XMPP_MUC_DOMAIN := .Env.XMPP_MUC_DOMAIN | default "muc.meet.jitsi" -}}
  49. {{ $XMPP_MUC_DOMAIN_PREFIX := (split "." $XMPP_MUC_DOMAIN)._0 -}}
  50. {{ $XMPP_HIDDEN_DOMAIN := .Env.XMPP_HIDDEN_DOMAIN | default "hidden.meet.jitsi" -}}
  51. admins = {
  52. {{ if .Env.JIGASI_XMPP_PASSWORD }}
  53. "{{ $JIGASI_XMPP_USER }}@{{ $XMPP_AUTH_DOMAIN }}",
  54. {{ end }}
  55. {{ if .Env.JIBRI_XMPP_PASSWORD }}
  56. "{{ $JIBRI_XMPP_USER }}@{{ $XMPP_AUTH_DOMAIN }}",
  57. {{ end }}
  58. "focus@{{ $XMPP_AUTH_DOMAIN }}",
  59. "{{ $JVB_AUTH_USER }}@{{ $XMPP_AUTH_DOMAIN }}"
  60. }
  61. unlimited_jids = {
  62. "focus@{{ $XMPP_AUTH_DOMAIN }}",
  63. "{{ $JVB_AUTH_USER }}@{{ $XMPP_AUTH_DOMAIN }}"
  64. }
  65. plugin_paths = { "/prosody-plugins/", "/prosody-plugins-custom", "/prosody-plugins-contrib" }
  66. muc_mapper_domain_base = "{{ $XMPP_DOMAIN }}";
  67. muc_mapper_domain_prefix = "{{ $XMPP_MUC_DOMAIN_PREFIX }}";
  68. recorder_prefixes = { "{{ $JIBRI_RECORDER_USER }}@{{ $XMPP_HIDDEN_DOMAIN }}" };
  69. http_default_host = "{{ $XMPP_DOMAIN }}"
  70. {{ if and $ENABLE_AUTH (or (eq $PROSODY_AUTH_TYPE "jwt") (eq $PROSODY_AUTH_TYPE "hybrid_matrix_token")) .Env.JWT_ACCEPTED_ISSUERS }}
  71. asap_accepted_issuers = { "{{ join "\",\"" (splitList "," .Env.JWT_ACCEPTED_ISSUERS | compact) }}" }
  72. {{ end }}
  73. {{ if and $ENABLE_AUTH (or (eq $PROSODY_AUTH_TYPE "jwt") (eq $PROSODY_AUTH_TYPE "hybrid_matrix_token")) .Env.JWT_ACCEPTED_AUDIENCES }}
  74. asap_accepted_audiences = { "{{ join "\",\"" (splitList "," .Env.JWT_ACCEPTED_AUDIENCES | compact) }}" }
  75. {{ end }}
  76. consider_bosh_secure = true;
  77. consider_websocket_secure = true;
  78. {{ if $ENABLE_XMPP_WEBSOCKET }}
  79. smacks_max_unacked_stanzas = 5;
  80. smacks_hibernation_time = 60;
  81. smacks_max_old_sessions = 1;
  82. {{ end }}
  83. {{ if $ENABLE_JAAS_COMPONENTS }}
  84. VirtualHost "jigasi.meet.jitsi"
  85. modules_enabled = {
  86. "bosh";
  87. "muc_password_check";
  88. }
  89. authentication = "token"
  90. app_id = "jitsi";
  91. asap_key_server = "https://jaas-public-keys.jitsi.net/jitsi-components/prod-8x8"
  92. asap_accepted_issuers = { "jaas-components" }
  93. asap_accepted_audiences = { "jigasi.{{ $PUBLIC_URL_DOMAIN }}" }
  94. {{ end }}
  95. VirtualHost "{{ $XMPP_DOMAIN }}"
  96. {{ if $ENABLE_AUTH }}
  97. {{ if eq $PROSODY_AUTH_TYPE "jwt" }}
  98. {{ if .Env.JWT_SIGN_TYPE }}
  99. signature_algorithm = "{{ .Env.JWT_SIGN_TYPE }}"
  100. {{ end -}}
  101. authentication = "{{ $JWT_AUTH_TYPE }}"
  102. app_id = "{{ .Env.JWT_APP_ID }}"
  103. {{ if $ENABLE_APP_SECRET }}
  104. app_secret = "{{ .Env.JWT_APP_SECRET }}"
  105. {{ end }}
  106. allow_empty_token = {{ $JWT_ALLOW_EMPTY }}
  107. {{ if $JWT_ASAP_KEYSERVER }}
  108. asap_key_server = "{{ .Env.JWT_ASAP_KEYSERVER }}"
  109. {{ end }}
  110. enable_domain_verification = {{ $JWT_ENABLE_DOMAIN_VERIFICATION }}
  111. {{ else if eq $PROSODY_AUTH_TYPE "ldap" }}
  112. authentication = "cyrus"
  113. cyrus_application_name = "xmpp"
  114. allow_unencrypted_plain_auth = true
  115. {{ else if eq $PROSODY_AUTH_TYPE "matrix" }}
  116. authentication = "matrix_user_verification"
  117. app_id = "{{ $MATRIX_UVS_ISSUER }}"
  118. uvs_base_url = "{{ .Env.MATRIX_UVS_URL }}"
  119. {{ if .Env.MATRIX_UVS_AUTH_TOKEN }}
  120. uvs_auth_token = "{{ .Env.MATRIX_UVS_AUTH_TOKEN }}"
  121. {{ end }}
  122. {{ if $MATRIX_UVS_SYNC_POWER_LEVELS }}
  123. uvs_sync_power_levels = true
  124. {{ end }}
  125. {{ else if eq $PROSODY_AUTH_TYPE "hybrid_matrix_token" }}
  126. authentication = "hybrid_matrix_token"
  127. app_id = "{{ .Env.JWT_APP_ID }}"
  128. {{ if $ENABLE_APP_SECRET }}
  129. app_secret = "{{ .Env.JWT_APP_SECRET }}"
  130. {{ end }}
  131. allow_empty_token = {{ $JWT_ALLOW_EMPTY }}
  132. enable_domain_verification = {{ $JWT_ENABLE_DOMAIN_VERIFICATION }}
  133. uvs_base_url = "{{ .Env.MATRIX_UVS_URL }}"
  134. {{ if .Env.MATRIX_UVS_ISSUER }}
  135. uvs_issuer = "{{ .Env.MATRIX_UVS_ISSUER }}"
  136. {{ end }}
  137. {{ if .Env.MATRIX_UVS_AUTH_TOKEN }}
  138. uvs_auth_token = "{{ .Env.MATRIX_UVS_AUTH_TOKEN }}"
  139. {{ end }}
  140. {{ else if eq $PROSODY_AUTH_TYPE "internal" }}
  141. authentication = "internal_hashed"
  142. disable_sasl_mechanisms={ "DIGEST-MD5", "OAUTHBEARER" }
  143. {{ end }}
  144. {{ else }}
  145. authentication = "jitsi-anonymous"
  146. {{ end }}
  147. ssl = {
  148. key = "/config/certs/{{ $XMPP_DOMAIN }}.key";
  149. certificate = "/config/certs/{{ $XMPP_DOMAIN }}.crt";
  150. }
  151. modules_enabled = {
  152. "bosh";
  153. {{ if $ENABLE_XMPP_WEBSOCKET }}
  154. "websocket";
  155. "smacks"; -- XEP-0198: Stream Management
  156. {{ end }}
  157. "speakerstats";
  158. "conference_duration";
  159. "room_metadata";
  160. {{ if $ENABLE_END_CONFERENCE }}
  161. "end_conference";
  162. {{ end }}
  163. {{ if $ENABLE_LOBBY }}
  164. "muc_lobby_rooms";
  165. {{ end }}
  166. {{ if $ENABLE_BREAKOUT_ROOMS }}
  167. "muc_breakout_rooms";
  168. {{ end }}
  169. {{ if $ENABLE_AV_MODERATION }}
  170. "av_moderation";
  171. {{ end }}
  172. {{ if .Env.XMPP_MODULES }}
  173. "{{ join "\";\n \"" (splitList "," .Env.XMPP_MODULES | compact) }}";
  174. {{ end }}
  175. {{ if and $ENABLE_AUTH (eq $PROSODY_AUTH_TYPE "ldap") }}
  176. "auth_cyrus";
  177. {{end}}
  178. {{ if $PROSODY_RESERVATION_ENABLED }}
  179. "reservations";
  180. {{ end }}
  181. {{ if $ENABLE_VISITORS }}
  182. "visitors";
  183. {{ end }}
  184. {{- if and $ENABLE_RECORDING_METADATA $ENABLE_AUTH (eq $PROSODY_AUTH_TYPE "jwt") $ENABLE_RECORDING }}
  185. "jibri_session";
  186. {{- end }}
  187. }
  188. main_muc = "{{ $XMPP_MUC_DOMAIN }}"
  189. room_metadata_component = "metadata.{{ $XMPP_DOMAIN }}"
  190. {{ if $ENABLE_LOBBY }}
  191. lobby_muc = "lobby.{{ $XMPP_DOMAIN }}"
  192. {{ if or $ENABLE_RECORDING $ENABLE_TRANSCRIPTIONS }}
  193. muc_lobby_whitelist = { "{{ $XMPP_HIDDEN_DOMAIN }}" }
  194. {{ end }}
  195. {{ end }}
  196. {{ if $PROSODY_RESERVATION_ENABLED }}
  197. reservations_api_prefix = "{{ $PROSODY_RESERVATION_REST_BASE_URL }}"
  198. {{ end }}
  199. {{ if $ENABLE_BREAKOUT_ROOMS }}
  200. breakout_rooms_muc = "breakout.{{ $XMPP_DOMAIN }}"
  201. {{ end }}
  202. speakerstats_component = "speakerstats.{{ $XMPP_DOMAIN }}"
  203. conference_duration_component = "conferenceduration.{{ $XMPP_DOMAIN }}"
  204. {{ if $ENABLE_END_CONFERENCE }}
  205. end_conference_component = "endconference.{{ $XMPP_DOMAIN }}"
  206. {{ end }}
  207. {{ if $ENABLE_AV_MODERATION }}
  208. av_moderation_component = "avmoderation.{{ $XMPP_DOMAIN }}"
  209. {{ end }}
  210. c2s_require_encryption = {{ $C2S_REQUIRE_ENCRYPTION }}
  211. {{ if $ENABLE_VISITORS -}}
  212. visitors_ignore_list = { "{{ $XMPP_HIDDEN_DOMAIN }}" }
  213. {{ end }}
  214. {{ if .Env.XMPP_CONFIGURATION -}}
  215. {{ join "\n " (splitList "," .Env.XMPP_CONFIGURATION | compact) }}
  216. {{ end -}}
  217. {{ if $ENABLE_GUEST_DOMAIN }}
  218. VirtualHost "{{ $XMPP_GUEST_DOMAIN }}"
  219. authentication = "{{ $GUEST_AUTH_TYPE }}"
  220. modules_enabled = {
  221. {{ if $ENABLE_XMPP_WEBSOCKET }}
  222. "smacks"; -- XEP-0198: Stream Management
  223. {{ end }}
  224. }
  225. c2s_require_encryption = {{ $C2S_REQUIRE_ENCRYPTION }}
  226. {{ if $ENABLE_VISITORS }}
  227. allow_anonymous_s2s = true
  228. {{ end }}
  229. {{ end }}
  230. VirtualHost "{{ $XMPP_AUTH_DOMAIN }}"
  231. ssl = {
  232. key = "/config/certs/{{ $XMPP_AUTH_DOMAIN }}.key";
  233. certificate = "/config/certs/{{ $XMPP_AUTH_DOMAIN }}.crt";
  234. }
  235. modules_enabled = {
  236. "limits_exception";
  237. {{- if and $ENABLE_RECORDING_METADATA $ENABLE_AUTH (eq $PROSODY_AUTH_TYPE "jwt") $ENABLE_RECORDING }}
  238. "jibri_session";
  239. {{- end }}
  240. "smacks";
  241. }
  242. authentication = "internal_hashed"
  243. smacks_hibernation_time = 15;
  244. {{ if or $ENABLE_RECORDING $ENABLE_TRANSCRIPTIONS }}
  245. VirtualHost "{{ $XMPP_HIDDEN_DOMAIN }}"
  246. modules_enabled = {
  247. "smacks";
  248. }
  249. authentication = "internal_hashed"
  250. {{ end }}
  251. Component "{{ $XMPP_INTERNAL_MUC_DOMAIN }}" "muc"
  252. storage = "memory"
  253. modules_enabled = {
  254. "muc_hide_all";
  255. "muc_filter_access";
  256. {{ if .Env.XMPP_INTERNAL_MUC_MODULES -}}
  257. "{{ join "\";\n\"" (splitList "," .Env.XMPP_INTERNAL_MUC_MODULES | compact) }}";
  258. {{ end -}}
  259. }
  260. restrict_room_creation = true
  261. muc_filter_whitelist="{{ $XMPP_AUTH_DOMAIN }}"
  262. muc_room_locking = false
  263. muc_room_default_public_jids = true
  264. muc_room_cache_size = 1000
  265. muc_tombstones = false
  266. muc_room_allow_persistent = false
  267. Component "{{ $XMPP_MUC_DOMAIN }}" "muc"
  268. restrict_room_creation = true
  269. storage = "memory"
  270. modules_enabled = {
  271. "muc_meeting_id";
  272. {{ if .Env.XMPP_MUC_MODULES -}}
  273. "{{ join "\";\n \"" (splitList "," .Env.XMPP_MUC_MODULES | compact) }}";
  274. {{ end -}}
  275. {{ if and $ENABLE_AUTH (or (eq $PROSODY_AUTH_TYPE "jwt") (eq $PROSODY_AUTH_TYPE "hybrid_matrix_token")) -}}
  276. "{{ $JWT_TOKEN_AUTH_MODULE }}";
  277. {{ end }}
  278. {{ if and $ENABLE_AUTH (eq $PROSODY_AUTH_TYPE "matrix") $MATRIX_UVS_SYNC_POWER_LEVELS -}}
  279. "matrix_power_sync";
  280. {{ end -}}
  281. {{ if and $ENABLE_AUTH (eq $PROSODY_AUTH_TYPE "hybrid_matrix_token") $MATRIX_UVS_SYNC_POWER_LEVELS -}}
  282. "matrix_affiliation";
  283. {{ end -}}
  284. {{ if and $ENABLE_AUTH (eq $PROSODY_AUTH_TYPE "hybrid_matrix_token") $MATRIX_LOBBY_BYPASS -}}
  285. "matrix_lobby_bypass";
  286. {{ end -}}
  287. {{ if not $DISABLE_POLLS -}}
  288. "polls";
  289. {{ end -}}
  290. {{ if $ENABLE_SUBDOMAINS -}}
  291. "muc_domain_mapper";
  292. {{ end -}}
  293. {{ if $ENABLE_RATE_LIMITS -}}
  294. "muc_rate_limit";
  295. "rate_limit";
  296. {{ end -}}
  297. {{ if .Env.MAX_PARTICIPANTS }}
  298. "muc_max_occupants";
  299. {{ end }}
  300. "muc_password_whitelist";
  301. }
  302. {{ if $ENABLE_RATE_LIMITS -}}
  303. -- Max allowed join/login rate in events per second.
  304. rate_limit_login_rate = {{ $RATE_LIMIT_LOGIN_RATE }};
  305. -- The rate to which sessions from IPs exceeding the join rate will be limited, in bytes per second.
  306. rate_limit_session_rate = {{ $RATE_LIMIT_SESSION_RATE }};
  307. -- The time in seconds, after which the limit for an IP address is lifted.
  308. rate_limit_timeout = {{ $RATE_LIMIT_TIMEOUT }};
  309. -- List of regular expressions for IP addresses that are not limited by this module.
  310. rate_limit_whitelist = {
  311. "127.0.0.1";
  312. {{ range $index, $cidr := (splitList "," $RATE_LIMIT_ALLOW_RANGES | compact) }}
  313. "{{ $cidr }}";
  314. {{ end }}
  315. };
  316. rate_limit_whitelist_hosts = {
  317. "{{ $XMPP_HIDDEN_DOMAIN }}";
  318. }
  319. {{ end -}}
  320. -- The size of the cache that saves state for IP addresses
  321. rate_limit_cache_size = {{ $RATE_LIMIT_CACHE_SIZE }};
  322. muc_room_cache_size = 10000
  323. muc_room_locking = false
  324. muc_room_default_public_jids = true
  325. {{ if .Env.XMPP_MUC_CONFIGURATION -}}
  326. {{ join "\n " (splitList "," .Env.XMPP_MUC_CONFIGURATION | compact) }}
  327. {{ end -}}
  328. {{ if .Env.MAX_PARTICIPANTS }}
  329. muc_access_whitelist = {
  330. "focus@{{ $XMPP_AUTH_DOMAIN }}";
  331. {{- if $ENABLE_RECORDING }}
  332. "{{ $JIBRI_RECORDER_USER }}@{{ $XMPP_HIDDEN_DOMAIN }}";
  333. {{- end }}
  334. {{- if $ENABLE_TRANSCRIPTIONS }}
  335. "{{ $JIGASI_TRANSCRIBER_USER }}@{{ $XMPP_HIDDEN_DOMAIN }}";
  336. {{- end }}
  337. }
  338. muc_max_occupants = "{{ .Env.MAX_PARTICIPANTS }}"
  339. {{ end }}
  340. muc_password_whitelist = {
  341. "focus@{{ $XMPP_AUTH_DOMAIN }}";
  342. {{- if $ENABLE_RECORDING }}
  343. "{{ $JIBRI_RECORDER_USER }}@{{ $XMPP_HIDDEN_DOMAIN }}";
  344. {{- end }}
  345. {{- if $ENABLE_TRANSCRIPTIONS }}
  346. "{{ $JIGASI_TRANSCRIBER_USER }}@{{ $XMPP_HIDDEN_DOMAIN }}";
  347. {{- end }}
  348. }
  349. muc_tombstones = false
  350. muc_room_allow_persistent = false
  351. Component "focus.{{ $XMPP_DOMAIN }}" "client_proxy"
  352. target_address = "focus@{{ $XMPP_AUTH_DOMAIN }}"
  353. Component "speakerstats.{{ $XMPP_DOMAIN }}" "speakerstats_component"
  354. muc_component = "{{ $XMPP_MUC_DOMAIN }}"
  355. {{- if .Env.XMPP_SPEAKERSTATS_MODULES }}
  356. modules_enabled = {
  357. "{{ join "\";\n \"" (splitList "," .Env.XMPP_SPEAKERSTATS_MODULES | compact) }}";
  358. }
  359. {{- end }}
  360. Component "conferenceduration.{{ $XMPP_DOMAIN }}" "conference_duration_component"
  361. muc_component = "{{ $XMPP_MUC_DOMAIN }}"
  362. {{ if $ENABLE_END_CONFERENCE }}
  363. Component "endconference.{{ $XMPP_DOMAIN }}" "end_conference"
  364. muc_component = "{{ $XMPP_MUC_DOMAIN }}"
  365. {{ end }}
  366. {{ if $ENABLE_AV_MODERATION }}
  367. Component "avmoderation.{{ $XMPP_DOMAIN }}" "av_moderation_component"
  368. muc_component = "{{ $XMPP_MUC_DOMAIN }}"
  369. {{ end }}
  370. {{ if $ENABLE_LOBBY }}
  371. Component "lobby.{{ $XMPP_DOMAIN }}" "muc"
  372. storage = "memory"
  373. restrict_room_creation = true
  374. muc_tombstones = false
  375. muc_room_allow_persistent = false
  376. muc_room_cache_size = 10000
  377. muc_room_locking = false
  378. muc_room_default_public_jids = true
  379. {{- if .Env.MAX_PARTICIPANTS }}
  380. muc_max_occupants = "{{ .Env.MAX_PARTICIPANTS }}"
  381. {{- end }}
  382. modules_enabled = {
  383. {{- if $ENABLE_RATE_LIMITS }}
  384. "muc_rate_limit";
  385. {{- end }}
  386. {{- if .Env.MAX_PARTICIPANTS }}
  387. "muc_max_occupants";
  388. {{- end }}
  389. {{- if .Env.XMPP_LOBBY_MUC_MODULES }}
  390. "{{ join "\";\n \"" (splitList "," .Env.XMPP_LOBBY_MUC_MODULES | compact) }}";
  391. {{- end }}
  392. }
  393. {{ end }}
  394. {{ if $ENABLE_BREAKOUT_ROOMS }}
  395. Component "breakout.{{ $XMPP_DOMAIN }}" "muc"
  396. storage = "memory"
  397. restrict_room_creation = true
  398. muc_room_cache_size = 10000
  399. muc_room_locking = false
  400. muc_room_default_public_jids = true
  401. muc_tombstones = false
  402. muc_room_allow_persistent = false
  403. modules_enabled = {
  404. "muc_meeting_id";
  405. {{ if not $DISABLE_POLLS -}}
  406. "polls";
  407. {{ end -}}
  408. {{ if $ENABLE_RATE_LIMITS -}}
  409. "muc_rate_limit";
  410. {{ end -}}
  411. {{ if .Env.XMPP_BREAKOUT_MUC_MODULES -}}
  412. "{{ join "\";\n \"" (splitList "," .Env.XMPP_BREAKOUT_MUC_MODULES | compact) }}";
  413. {{ end -}}
  414. }
  415. {{ end }}
  416. Component "metadata.{{ $XMPP_DOMAIN }}" "room_metadata_component"
  417. muc_component = "{{ $XMPP_MUC_DOMAIN }}"
  418. breakout_rooms_component = "breakout.{{ $XMPP_DOMAIN }}"
  419. {{ if $ENABLE_VISITORS }}
  420. Component "visitors.{{ $XMPP_DOMAIN }}" "visitors_component"
  421. auto_allow_visitor_promotion = true
  422. always_visitors_enabled = true
  423. {{ end }}