• Joined on 2020-11-26
jsydll pushed to feature/multitenancy at jotbe/ansible-role-nextcloud-docker 2024-01-14 16:41:19 +01:00
520ee33b0e Fixed file permissions and multitenancy feature (manually tested).
jsydll pushed to feature/expose-jitsi-metrics at jotbe/ansible-role-jitsi-docker 2024-01-13 14:55:20 +01:00
63f8b54302 Add exporter container if metrics shall be exposed.
89a5c35710 Add PUBLIC_URL to all Jitsi containers to allow for proper routing by Traefik.
Compare 2 commits »
d975c9abf0 Adjusted variables and docker-compose file to account for multitenancy setups.
8ef0adbb17 Adjusted variables and docker-compose file to account for multitenancy setups.
44711308a6 Added install path and consolidated var usage.
41832f4797 Merge pull request 'Fixes CSP webworker-src' (#5) from bugfix/csp-webworker-src into master
85d00d96fe Fixes CSP webworker-src
Compare 19 commits »
jsydll pushed to feature/multitenancy at jotbe/ansible-role-jitsi-docker 2024-01-13 14:40:47 +01:00
8ef0adbb17 Adjusted variables and docker-compose file to account for multitenancy setups.
44711308a6 Added install path and consolidated var usage.
41832f4797 Merge pull request 'Fixes CSP webworker-src' (#5) from bugfix/csp-webworker-src into master
85d00d96fe Fixes CSP webworker-src
757642f84d Merge pull request 'Updates Jitsi to stable-8960-1' (#4) from feature/jitsi-update-stable-8960-1 into master
Compare 18 commits »
44711308a6 Added install path and consolidated var usage.
41832f4797 Merge pull request 'Fixes CSP webworker-src' (#5) from bugfix/csp-webworker-src into master
85d00d96fe Fixes CSP webworker-src
757642f84d Merge pull request 'Updates Jitsi to stable-8960-1' (#4) from feature/jitsi-update-stable-8960-1 into master
04fc0023df Updates Jitsi to stable-8960-1
Compare 17 commits »
jsydll pushed to feature/multitenancy at jotbe/ansible-role-cryptpad-docker 2024-01-13 14:24:26 +01:00
401a937b4e Adjusted variables and docker-compose file to account for multitenancy setups.
56a7002f33 Added install paths and new default values.
bb01c7228a Changed Docker image to promasu/cryptpad:v3.24.0
Compare 3 commits »
jsydll pushed to feature/multitenancy at jotbe/ansible-role-collabora-online-... 2024-01-13 14:20:15 +01:00
40049b2e3e Adjusted variables and docker-compose file to account for multitenancy setups.
83cec2905c Consolidated variable names and introduced install path.
e80820b308 Fixes Collabora
Compare 3 commits »
83cec2905c Consolidated variable names and introduced install path.
e80820b308 Fixes Collabora
Compare 2 commits »
jsydll created branch feature/update-traefik-version in jotbe/ansible-role-traefik-docker 2024-01-13 14:06:13 +01:00
2e2a86b52e Use traefik 2.5.
jsydll created branch feature/expose-jitsi-metrics in jotbe/ansible-role-jitsi-docker 2024-01-13 13:59:35 +01:00
jsydll pushed to feature/expose-jitsi-metrics at jotbe/ansible-role-jitsi-docker 2024-01-13 13:59:35 +01:00
eaec14a23f Add exporter container if metrics shall be exposed.
jsydll commented on issue jotbe/ansible-role-jitsi-docker#3 2021-01-11 20:45:34 +01:00
Safari not working in multitenancy setup.

Still not working. Although FF and Chrome setups work, I see CSP related error messages there, too - only that they do not seem as restrictive as Safari is... So my best guess currently is that in general the CSP configuration of Traefik is broken in my multitenancy setup. This is the relevant part of the jitsi/web instance in my adjusted docker-compose.jitsi.yml.j2:

...
labels:
    - "traefik.enable=true"
    - "traefik.docker.network=traefik_public"
    - "traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.rule=Host(`{{ jitsi_virtual_host }}`)"
    - "traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.entrypoints=websecure"
    - "traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.tls=true"
    - "traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.tls.certresolver=defaultresolver"
    - "traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.SSLRedirect=true"
    - "traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.browserXSSFilter=true"
    - "traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.contentTypeNosniff=true"
    - "traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.forceSTSHeader=true"
    - "traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.STSSeconds=315360000"
    - "traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.STSIncludeSubdomains=true"
    - "traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.STSPreload=true"
    - "traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.featurePolicy=geolocation 'none'; payment 'none'"
    - "traefik.http.middlewares.jitsi{{ jitsi_multitenant_postfix }}-headers.headers.contentSecurityPolicy=default-src 'self'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; block-all-mixed-content"
    - "traefik.http.routers.jitsi{{ jitsi_multitenant_postfix }}.middlewares=jitsi{{ jitsi_multitenant_postfix }}-headers"
...
jsydll commented on issue jotbe/ansible-role-jitsi-docker#3 2021-01-10 23:02:58 +01:00
Safari not working in multitenancy setup.

I just saw that there's a new stable out so I pruned my images and updated the instances to stable-5142-4. Will test with Safari again as soon as I get a grip on a fruity device.

jsydll opened issue jotbe/ansible-role-jitsi-docker#3 2021-01-10 22:30:38 +01:00
Safari not working in multitenancy setup.
jsydll commented on pull request jotbe/ansible-role-jitsi-docker#2 2020-12-14 07:34:25 +01:00
feature/latest-upstream-docker-compose

I'm sorry, got that mixed up with one of my branches where I also needed to introduce such a variable :D

jsydll commented on pull request jotbe/ansible-role-jitsi-docker#2 2020-12-13 14:31:24 +01:00
feature/latest-upstream-docker-compose

As long as this does not break our current setup, I'm fine with having the new labels here.

jsydll commented on pull request jotbe/ansible-role-jitsi-docker#2 2020-12-13 14:29:56 +01:00
feature/latest-upstream-docker-compose

To my knowledge, this variable already exists: jitsi_bridge_udp_port. Or do I mix up things here?

jsydll commented on pull request jotbe/ansible-role-jitsi-docker#2 2020-12-13 13:30:11 +01:00
feature/latest-upstream-docker-compose

Memo for myself: This creates conflicts with the upcoming PR on multitenancy.

jsydll commented on pull request jotbe/ansible-role-jitsi-docker#2 2020-12-13 13:28:08 +01:00
feature/latest-upstream-docker-compose

Could that be parameterized with ${JVB_PORT}?