From b697744a46c8ea83603c878f1d40f2327e7e43bb Mon Sep 17 00:00:00 2001
From: mikl <mikl@iscg.dev>
Date: Sun, 12 Jul 2026 22:01:19 +0300
Subject: [PATCH] =?UTF-8?q?heather:=20jitsi=20=E2=80=94=20add=20meet.jitsi?=
 =?UTF-8?q?=20network=20with=20prosody=20alias=20xmpp.meet.jitsi?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Jicofo/jvb/web ищут prosody по FQDN xmpp.meet.jitsi (default docker-jitsi).
Custom bridge network даёт prosody DNS alias. Coturn в host network — вне.
---
 hosts/heather/arion-compose.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/hosts/heather/arion-compose.nix b/hosts/heather/arion-compose.nix
index 5a000b2..c51a477 100644
--- a/hosts/heather/arion-compose.nix
+++ b/hosts/heather/arion-compose.nix
@@ -41,6 +41,15 @@
     jitsi-jvb = {};
     jitsi-transcripts = {};
   };
+
+  # --- Custom network для jitsi с DNS aliases ---
+  # Контейнеры jitsi общаются по FQDN (xmpp.meet.jitsi). Alias задан в
+  # service.networks у prosody. Coturn в host network — вне этой сети.
+  docker-compose.networks = {
+    meet.jitsi = {
+      driver = "bridge";
+    };
+  };
   services = {
     # === Forgejo (git.iscg.dev) ===
     # Первый сервис, proof-of-concept для цепочки arion→docker→Caddy.
@@ -163,6 +172,7 @@
         "jitsi-transcripts:/usr/share/jitsi-meet/transcripts"
       ];
       service.depends_on = [ "jitsi-jvb" ];
+      service.networks = [ "meet.jitsi" ];
       service.env_file = [ "/var/lib/jitsi-secrets/jitsi.env" ];
       service.environment = {
         PUBLIC_URL = "https://jitsi.iscg.dev";
@@ -206,6 +216,8 @@
       service.volumes = [
         "jitsi-prosody:/config"
       ];
+      # network aliases: prosody доступен как xmpp.meet.jitsi для jicofo/jvb/web
+      service.networks = { "meet.jitsi".aliases = [ "xmpp.meet.jitsi" ]; };
       service.env_file = [ "/var/lib/jitsi-secrets/jitsi.env" ];
       service.environment = {
         TZ = "Europe/Moscow";
@@ -225,6 +237,7 @@
       service.ports = [ "127.0.0.1:8888:8888" ];
       service.volumes = [ "jitsi-jicofo:/config" ];
       service.depends_on = [ "jitsi-prosody" ];
+      service.networks = [ "meet.jitsi" ];
       service.env_file = [ "/var/lib/jitsi-secrets/jitsi.env" ];
       service.environment = {
         TZ = "Europe/Moscow";
@@ -245,6 +258,7 @@
       ];
       service.volumes = [ "jitsi-jvb:/config" ];
       service.depends_on = [ "jitsi-prosody" ];
+      service.networks = [ "meet.jitsi" ];
       service.env_file = [ "/var/lib/jitsi-secrets/jitsi.env" ];
       service.environment = {
         TZ = "Europe/Moscow";