diff options
author | tv <tv@krebsco.de> | 2023-03-02 09:20:37 +0100 |
---|---|---|
committer | tv <tv@krebsco.de> | 2023-03-02 09:20:37 +0100 |
commit | 03a9448a0922fcf158c4357922bed689245105e3 (patch) | |
tree | 7dbedf90d0443bd1e375aac61f63735f43e64984 /lass/2configs/services/coms/jitsi.nix | |
parent | 177fd1eeec05f0821f1ccc63733b3e0fd5aed7b6 (diff) | |
parent | 8639d428c2e9f2190ec4e4b5dd931f24a4166f36 (diff) |
Merge remote-tracking branch 'prism/master' into head
Diffstat (limited to 'lass/2configs/services/coms/jitsi.nix')
-rw-r--r-- | lass/2configs/services/coms/jitsi.nix | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/lass/2configs/services/coms/jitsi.nix b/lass/2configs/services/coms/jitsi.nix new file mode 100644 index 000000000..bbcb36166 --- /dev/null +++ b/lass/2configs/services/coms/jitsi.nix @@ -0,0 +1,43 @@ +{ config, lib, pkgs, ... }: +{ + + services.jitsi-meet = { + enable = true; + hostName = "jitsi.lassul.us"; + config = { + enableWelcomePage = true; + requireDisplayName = true; + analytics.disabled = true; + startAudioOnly = true; + channelLastN = 4; + stunServers = [ + # - https://www.kuketz-blog.de/jitsi-meet-server-einstellungen-fuer-einen-datenschutzfreundlichen-betrieb/ + { urls = "turn:turn.matrix.org:3478?transport=udp"; } + { urls = "turn:turn.matrix.org:3478?transport=tcp"; } + # - services.coturn: + #{ urls = "turn:turn.${domainName}:3479?transport=udp"; } + #{ urls = "turn:turn.${domainName}:3479?transport=tcp"; } + ]; + constraints.video.height = { + ideal = 720; + max = 1080; + min = 240; + }; + }; + interfaceConfig = { + SHOW_JITSI_WATERMARK = false; + SHOW_WATERMARK_FOR_GUESTS = false; + DISABLE_PRESENCE_STATUS = true; + GENERATE_ROOMNAMES_ON_WELCOME_PAGE = false; + }; + }; + + services.jitsi-videobridge.config = { + org.jitsi.videobridge.TRUST_BWE = false; + }; + + krebs.iptables.tables.filter.INPUT.rules = [ + { predicate = "-p tcp --dport 4443"; target = "ACCEPT"; } + { predicate = "-p udp --dport 10000"; target = "ACCEPT"; } + ]; +} |