From 0b409eb0fa1743e21fb44a62011145453a6cc3bc Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Sun, 11 Jul 2021 15:02:12 +0200
Subject: jitsi/meet: add support for authentication

---
 roles/apps/jitsi/meet/templates/pod-spec.yml.j2 | 32 +++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

(limited to 'roles/apps/jitsi/meet/templates')

diff --git a/roles/apps/jitsi/meet/templates/pod-spec.yml.j2 b/roles/apps/jitsi/meet/templates/pod-spec.yml.j2
index 9de6659d..0d6905a0 100644
--- a/roles/apps/jitsi/meet/templates/pod-spec.yml.j2
+++ b/roles/apps/jitsi/meet/templates/pod-spec.yml.j2
@@ -22,6 +22,13 @@ containers:
     subPath: jicofo
     mountPath: /config
   env:
+{% if jitsi_meet_auth is defined %}
+  - name: ENABLE_AUTH
+    value: "1"
+  - name: AUTH_TYPE
+    value: "internal"
+
+{% endif %}
   - name: XMPP_SERVER
     value: 127.0.0.1
   - name: XMPP_DOMAIN
@@ -59,6 +66,7 @@ containers:
   - name: scripts
     subPath: prosody/cont-init.sh
     mountPath: /etc/cont-init.d/99-k8s
+    readOnly: yes
   - name: config
     subPath: prosody
     mountPath: /config
@@ -68,10 +76,23 @@ containers:
   - name: ENABLE_LOBBY
     value: "1"
 
+{% if jitsi_meet_auth is defined %}
+  - name: ENABLE_AUTH
+    value: "1"
+  - name: AUTH_TYPE
+    value: "internal"
+  - name: ENABLE_GUESTS
+    value: "{{ (jitsi_meet_auth.enable_guests | default(false)) | ternary('1', '0') }}"
+
+{% endif %}
   - name: XMPP_DOMAIN
     value: meet.jitsi
   - name: XMPP_AUTH_DOMAIN
     value: auth.meet.jitsi
+{% if jitsi_meet_auth is defined and (jitsi_meet_auth.enable_guests | default(false)) %}
+  - name: XMPP_GUEST_DOMAIN
+    value: guest.meet.jitsi
+{% endif %}
   - name: XMPP_MUC_DOMAIN
     value: muc.meet.jitsi
   - name: XMPP_INTERNAL_MUC_DOMAIN
@@ -121,10 +142,21 @@ containers:
   - name: ENABLE_P2P
     value: "{{ jitsi_meet_p2p_enable | ternary('true', 'false') }}"
 
+{% if jitsi_meet_auth is defined %}
+  - name: ENABLE_AUTH
+    value: "1"
+  - name: ENABLE_GUESTS
+    value: "{{ (jitsi_meet_auth.enable_guests | default(false)) | ternary('1', '0') }}"
+
+{% endif %}
   - name: XMPP_DOMAIN
     value: meet.jitsi
   - name: XMPP_AUTH_DOMAIN
     value: auth.meet.jitsi
+{% if jitsi_meet_auth is defined and (jitsi_meet_auth.enable_guests | default(false)) %}
+  - name: XMPP_GUEST_DOMAIN
+    value: guest.meet.jitsi
+{% endif %}
   - name: XMPP_MUC_DOMAIN
     value: muc.meet.jitsi
   - name: XMPP_BOSH_URL_BASE
-- 
cgit v1.2.3