mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

heather: enable jitsi guest access (lobby) + patch prosody guest websocket

Browse source 
- ENABLE_GUESTS=1 in web/prosody/jicofo: unauthenticated users join via
  guest.meet.jitsi domain, wait in lobby until moderator (mikl) admits
- Patched prosody template mounted at /defaults/conf.d/jitsi-meet.cfg.lua:
  adds 'websocket' module to guest VirtualHost (upstream bug — guest domain
  only had 'smacks', no 'websocket' → wss disconnect loop)
- Template at /var/lib/jitsi-secrets/jitsi-meet.cfg.lua.template (root:root 0644)
- Fixes: mobile/anonymous users couldn't join, got disconnect loop
This commit is contained in:
mikl 2026-07-13 01:37:20 +03:00
parent 3d2f432619
commit 61e71b3ee4
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
hosts/heather/arion-compose.nix
View file

@ -183,6 +183,9 @@
TURN_HOST = "51.250.45.111"; TURN_HOST = "51.250.45.111";
TURN_PORT = "3478"; TURN_PORT = "3478";
TURN_TRANSPORT = "udp"; TURN_TRANSPORT = "udp";
# Guest access: unauthenticated users join via guest domain, wait in
# lobby until a moderator (mikl) authenticates and admits them.
ENABLE_GUESTS = "1";
}; };
}; };
@ -194,6 +197,10 @@
service.volumes = [ service.volumes = [
"jitsi-prosody-config:/config" "jitsi-prosody-config:/config"
"jitsi-prosody-data:/var/lib/prosody" "jitsi-prosody-data:/var/lib/prosody"
# Patched prosody template: guest VirtualHost gets "websocket" module
# (upstream bug — guest domain lacks it → wss disconnect loop).
# Patched file at /var/lib/jitsi-secrets/jitsi-meet.cfg.lua.template
"/var/lib/jitsi-secrets/jitsi-meet.cfg.lua.template:/defaults/conf.d/jitsi-meet.cfg.lua:ro"
]; ];
service.networks.meet-jitsi.aliases = [ "xmpp.meet.jitsi" ]; service.networks.meet-jitsi.aliases = [ "xmpp.meet.jitsi" ];
service.env_file = [ "/var/lib/jitsi-secrets/jitsi.env" ]; service.env_file = [ "/var/lib/jitsi-secrets/jitsi.env" ];
@ -204,6 +211,7 @@
AUTH_TYPE = "internal"; AUTH_TYPE = "internal";
ENABLE_XMPP_WEBSOCKET = "1"; ENABLE_XMPP_WEBSOCKET = "1";
ENABLE_IPV6 = "0"; ENABLE_IPV6 = "0";
ENABLE_GUESTS = "1";
}; };
}; };
@ -220,6 +228,7 @@
TZ = "Europe/Moscow"; TZ = "Europe/Moscow";
ENABLE_AUTH = "1"; ENABLE_AUTH = "1";
AUTH_TYPE = "internal"; AUTH_TYPE = "internal";
ENABLE_GUESTS = "1";
}; };
}; };