mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

heather: jitsi drop read_only/tmpfs (arion schema doesn't support them)

Browse source
This commit is contained in:
mikl 2026-07-13 00:57:36 +03:00
parent cd018a24c2
commit 6c536852ad
1 changed files with 1 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
hosts/heather/arion-compose.nix
View file

@ -146,7 +146,7 @@
# Repo: https://github.com/jitsi/docker-jitsi-meet (release stable-11031) # Repo: https://github.com/jitsi/docker-jitsi-meet (release stable-11031)
# Minimal stack: web/prosody/jicofo/jvb. No coturn/jigasi/jibri. # Minimal stack: web/prosody/jicofo/jvb. No coturn/jigasi/jibri.
# - Images: jitsi/* (docker hub; GHCR ghcr.io/jitsi/* not accessible) # - Images: jitsi/* (docker hub; GHCR ghcr.io/jitsi/* not accessible)
# - read_only + tmpfs per official compose # - read_only + tmpfs from official compose NOT supported by arion schema (skipped)
# - Named volumes (config + prosody data separate) # - Named volumes (config + prosody data separate)
# - Reverse proxy: DISABLE_HTTPS=1, Caddy terminates TLS # - Reverse proxy: DISABLE_HTTPS=1, Caddy terminates TLS
# - JVB_ADVERTISE_IPS=51.250.45.111, :10000/udp public # - JVB_ADVERTISE_IPS=51.250.45.111, :10000/udp public
@ -157,11 +157,6 @@
service.image = "jitsi/web:stable-11031"; service.image = "jitsi/web:stable-11031";
service.container_name = "jitsi-web"; service.container_name = "jitsi-web";
service.restart = "unless-stopped"; service.restart = "unless-stopped";
service.read_only = true;
service.tmpfs = [
"/run:size=16M,mode=1750,exec"
"/tmp:size=16M,mode=1777,noexec"
];
service.ports = [ "127.0.0.1:8000:80" ]; service.ports = [ "127.0.0.1:8000:80" ];
service.volumes = [ service.volumes = [
"jitsi-web-config:/config" "jitsi-web-config:/config"
@ -191,11 +186,6 @@
service.image = "jitsi/prosody:stable-11031"; service.image = "jitsi/prosody:stable-11031";
service.container_name = "jitsi-prosody"; service.container_name = "jitsi-prosody";
service.restart = "unless-stopped"; service.restart = "unless-stopped";
service.read_only = true;
service.tmpfs = [
"/run:size=16M,mode=1750,exec"
"/tmp:size=16M,mode=1777,noexec"
];
service.expose = [ "5222" "5269" "5347" "5280" ]; service.expose = [ "5222" "5269" "5347" "5280" ];
service.volumes = [ service.volumes = [
"jitsi-prosody-config:/config" "jitsi-prosody-config:/config"
@ -217,11 +207,6 @@
service.image = "jitsi/jicofo:stable-11031"; service.image = "jitsi/jicofo:stable-11031";
service.container_name = "jitsi-jicofo"; service.container_name = "jitsi-jicofo";
service.restart = "unless-stopped"; service.restart = "unless-stopped";
service.read_only = true;
service.tmpfs = [
"/run:size=16M,mode=1750,exec"
"/tmp:size=16M,mode=1777,noexec"
];
service.ports = [ "127.0.0.1:8888:8888" ]; service.ports = [ "127.0.0.1:8888:8888" ];
service.volumes = [ "jitsi-jicofo-config:/config" ]; service.volumes = [ "jitsi-jicofo-config:/config" ];
service.depends_on = [ "jitsi-prosody" ]; service.depends_on = [ "jitsi-prosody" ];
@ -238,11 +223,6 @@
service.image = "jitsi/jvb:stable-11031"; service.image = "jitsi/jvb:stable-11031";
service.container_name = "jitsi-jvb"; service.container_name = "jitsi-jvb";
service.restart = "unless-stopped"; service.restart = "unless-stopped";
service.read_only = true;
service.tmpfs = [
"/run:size=16M,mode=1750,exec"
"/tmp:size=16M,mode=1777,noexec"
];
service.ports = [ service.ports = [
"10000:10000/udp" "10000:10000/udp"
"127.0.0.1:8080:8080" "127.0.0.1:8080:8080"