initContainers:
- name: prepare-config
  image: busybox
  workingDir: /config
  command:
    - sh
    - -c
    - mkdir -p jicofo prosody web jvb
  volumeMounts:
  - name: config
    mountPath: /config
containers:
- name: jicofo
  image: "jitsi/jicofo:{{ jitsi_meet_version }}"
  resources:
    requests:
      memory: "1Gi"
    limits:
      memory: "4Gi"
  volumeMounts:
  - name: config
    subPath: jicofo
    mountPath: /config
  env:
  - name: XMPP_SERVER
    value: 127.0.0.1
  - name: XMPP_DOMAIN
    value: meet.jitsi
  - name: XMPP_AUTH_DOMAIN
    value: auth.meet.jitsi
  - name: XMPP_MUC_DOMAIN
    value: muc.meet.jitsi
  - name: XMPP_INTERNAL_MUC_DOMAIN
    value: internal-muc.meet.jitsi

  - name: JICOFO_COMPONENT_SECRET
    value: "{{ jitsi_meet_secrets.jicofo_component_secret }}"
  - name: JICOFO_AUTH_USER
    value: focus
  - name: JICOFO_AUTH_PASSWORD
    value: "{{ jitsi_meet_secrets.jicofo_auth_password }}"

  - name: JVB_BREWERY_MUC
    value: jvbbrewery

  - name: TZ
    value: {{ jitsi_meet_timezone }}

- name: prosody
  image: "jitsi/prosody:{{ jitsi_meet_version }}"
  resources:
    requests:
      memory: "128Mi"
    limits:
      memory: "512Mi"
  volumeMounts:
  - name: scripts
    subPath: prosody/cont-init.sh
    mountPath: /etc/cont-init.d/99-k8s
  - name: config
    subPath: prosody
    mountPath: /config
  env:
  - name: PUBLIC_URL
    value: "https://{{ jitsi_meet_hostname }}"
  - name: ENABLE_LOBBY
    value: "1"

  - name: XMPP_DOMAIN
    value: meet.jitsi
  - name: XMPP_AUTH_DOMAIN
    value: auth.meet.jitsi
  - name: XMPP_MUC_DOMAIN
    value: muc.meet.jitsi
  - name: XMPP_INTERNAL_MUC_DOMAIN
    value: internal-muc.meet.jitsi

  - name: JICOFO_COMPONENT_SECRET
    value: "{{ jitsi_meet_secrets.jicofo_component_secret }}"
  - name: JICOFO_AUTH_USER
    value: focus
  - name: JICOFO_AUTH_PASSWORD
    value: "{{ jitsi_meet_secrets.jicofo_auth_password }}"

  - name: JVB_AUTH_USER
    value: jvb
  - name: JVB_AUTH_PASSWORD
    value: "{{ jitsi_meet_secrets.jvb_auth_password }}"
  - name: JVB_TCP_HARVESTER_DISABLED
    value: "true"

  - name: TZ
    value: {{ jitsi_meet_timezone }}

- name: web
  image: "jitsi/web:{{ jitsi_meet_version }}"
  resources:
    requests:
      memory: "256Mi"
    limits:
      memory: "1Gi"
  ports:
  - protocol: TCP
    containerPort: 80
    hostPort: {{ jitsi_meet_http_port }}
    hostIP: 127.0.0.1
  volumeMounts:
  - name: config
    subPath: web
    mountPath: /config
  env:
  - name: PUBLIC_URL
    value: "https://{{ jitsi_meet_hostname }}"
  - name: DISABLE_HTTPS
    value: "1"
  - name: ENABLE_HTTP_REDIRECT
    value: "0"

  - name: XMPP_SERVER
    value: 127.0.0.1
  - name: XMPP_DOMAIN
    value: meet.jitsi
  - name: XMPP_AUTH_DOMAIN
    value: auth.meet.jitsi
  - name: XMPP_INTERNAL_MUC_DOMAIN
    value: internal-muc.meet.jitsi
  - name: XMPP_BOSH_URL_BASE
    value: http://127.0.0.1:5280
  - name: XMPP_MUC_DOMAIN
    value: muc.meet.jitsi

  - name: JICOFO_AUTH_USER
    value: focus

  - name: JVB_TCP_HARVESTER_DISABLED
    value: "true"

  - name: TZ
    value: {{ jitsi_meet_timezone }}

- name: jvb
  image: "jitsi/jvb:{{ jitsi_meet_version }}"
  resources:
    requests:
      memory: "1Gi"
    limits:
      memory: "4Gi"
  ports:
  - protocol: UDP
    containerPort: {{ jitsi_meet_jvb_port }}
    hostPort: {{ jitsi_meet_jvb_port }}
    hostIP: "{{ external_ip | default(ansible_default_ipv4.address) }}"
  volumeMounts:
  - name: config
    subPath: jvb
    mountPath: /config
  env:
  - name: XMPP_SERVER
    value: 127.0.0.1
  - name: XMPP_DOMAIN
    value: meet.jitsi
  - name: XMPP_AUTH_DOMAIN
    value: auth.meet.jitsi
  - name: XMPP_INTERNAL_MUC_DOMAIN
    value: internal-muc.meet.jitsi

  - name: JICOFO_AUTH_USER
    value: focus
  - name: JICOFO_AUTH_PASSWORD
    value: "{{ jitsi_meet_secrets.jicofo_auth_password }}"

  - name: JVB_AUTH_USER
    value: jvb
  - name: JVB_AUTH_PASSWORD
    value: "{{ jitsi_meet_secrets.jvb_auth_password }}"
  - name: JVB_BREWERY_MUC
    value: jvbbrewery
  - name: JVB_PORT
    value: "{{ jitsi_meet_jvb_port }}"
  - name: JVB_TCP_HARVESTER_DISABLED
    value: "true"
  - name: DOCKER_HOST_ADDRESS
    value: "{{ external_ip | default(ansible_default_ipv4.address) }}"

  - name: TZ
    value: {{ jitsi_meet_timezone }}

volumes:
- name: scripts
  hostPath:
    path: "{{ jitsi_meet_base_path }}/{{ jitsi_meet_inst_name }}/scripts"
- name: config
  emptyDir:
    medium: Memory