Jitsi services deployment

This repository is based on https://github.com/jitsi/docker-jitsi-meet. It uses the docker-compose and .env file as ansible templates for deployment.

Configuration

Most variables for configuring the jitsi docker containers can be adjusted from the ansible inventories. Further configuration info can be found here https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker

Some variables are not implemented yet commented for example JIGASI or LDAP related configs.

Usage

Preparations

A valid host konfiguration must be supplied in the ansible inventory this includes

• ssh key
• user
• ip address

Additionally each of the Ansible wrapper script functions needs the secrets variables in the file inventory/secrets_inventory.ini a template with some explanation exitsts at inventory/secrets_infentory.example.ini.

Create an encrypted ansible-vault file with the content of the example file and set the values.

  $ ansible-vault create inventory/secrets_inventory.ini

If the secrets in the ansible-vault need to be changed, use the following command ansible-vault edit inventory/secrets_inventory.ini.

Dokumentation for ansible-vaults can be found here https://docs.ansible.com/ansible/latest/user_guide/vault.html

Ansible wrapper script

Usage examples:

  bash jitsi_ansible_wrapper --install
  bash jitsi_ansible_wrapper --start
  bash jitsi_ansible_wrapper --reset
  bash jitsi_ansible_wrapper --createuser --username <username> --password <password>

Options:
  -i,  --install                  # installs all jitsi related services and docker containers
  -r,  --remove                   # resets the host and removes everything jitsi related !!! removes users for internal auth !!!
  -u,  --up                       # starts all jitsi related services and docker containers
  -d,  --down                     # down all jitsi related services and docker containers
       --reset                    # runs all roles successively to completly reinstall and startup the jitsi services !!! removes users for internal auth !!!
  -cu, --creatuser                # create a new user
       --username <username>      # the username parameter for a new user
       --password <password>      # the password parameter for a new user
  -rs, --restart                  # starts all jitsi related services and docker containers
       --dry-run                  # Do not make any changes, just print ansible commands
  -v,  --version                  # Show program version
       --debug                    # Enable debug output

Letsencrypt test cert

Enable staging / testing certificats

• Enable the mount for service web in docker-compose template /pc/roles/configure_docker/create/templates/docker-compose.yml.j2

      # - ${CONFIG}/certbot-update.sh:/etc/cont-init.d/05-certboot-update

• Add parameter injection in ansible inventory /inventory/inventory.ini for variable letsencrypt_email

    letsencrypt_email="[email protected] --test-cert --break-my-certs"