jotbe/ansible-role-jitsi-docker
1
0
Fork 0
Code Issues 1 Pull requests 1 Releases Wiki Activity

Adjusted variables and docker-compose file to account for multitenancy setups.

Browse source
This commit is contained in:
Joschka Seydell 2020-11-30 13:38:06 -08:00
parent 44711308a6
commit 8ef0adbb17
5 changed files with 29 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

28
templates/docker-compose.jitsi.yml.j2
View file

@ -156,20 +156,20 @@ services:
labels:
traefik.enable: true
traefik.docker.network: traefik_public
traefik.http.routers.jitsi.rule: Host(`{{ jitsi_virtual_host }}`)
traefik.http.routers.jitsi.entrypoints: websecure
traefik.http.routers.jitsi.tls: true
traefik.http.routers.jitsi.tls.certresolver: defaultresolver
traefik.http.middlewares.jitsi-headers.headers.SSLRedirect: true
traefik.http.middlewares.jitsi-headers.headers.browserXSSFilter: true
traefik.http.middlewares.jitsi-headers.headers.contentTypeNosniff: true
traefik.http.middlewares.jitsi-headers.headers.forceSTSHeader: true
traefik.http.middlewares.jitsi-headers.headers.STSSeconds: 315360000
traefik.http.middlewares.jitsi-headers.headers.STSIncludeSubdomains: true
traefik.http.middlewares.jitsi-headers.headers.STSPreload: true
traefik.http.middlewares.jitsi-headers.headers.featurePolicy: geolocation 'none'; payment 'none'
traefik.http.middlewares.jitsi-headers.headers.contentSecurityPolicy: default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline'; worker-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'none'; block-all-mixed-content
traefik.http.routers.jitsi.middlewares: jitsi-headers
traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.rule: Host(`{{ jitsi_virtual_host }}`)
traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.entrypoints: websecure
traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.tls: true
traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.tls.certresolver: defaultresolver
traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.SSLRedirect: true
traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.browserXSSFilter: true
traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.contentTypeNosniff: true
traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.forceSTSHeader: true
traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.STSSeconds: 315360000
traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.STSIncludeSubdomains: true
traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.STSPreload: true
traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.featurePolicy: geolocation 'none'; payment 'none'
traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.contentSecurityPolicy: default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline'; worker-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'none'; block-all-mixed-content
traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.middlewares: jitsi{{ jitsi_multitenant_postfix }}-headers
networks:
public:
meet.jitsi:

6
templates/env.jitsi.j2
View file

@ -11,6 +11,12 @@
################################################################################
#
# Docker Compose configuration
#
# Project name for this Docker Compose setup
COMPOSE_PROJECT_NAME=jitsi{{ jitsi_multitenant_postfix }}
#
# Basic configuration options
#