apiVersion: v1
kind: Pod
metadata:
  name: "jitsi-meet-{{ jitsi_meet_inst_name }}"
spec:
  initContainers:
  - name: prepare-config
    image: busybox
    workingDir: /config
    command:
      - sh
      - -c
      - mkdir -p jicofo prosody web jvb
    volumeMounts:
    - name: config
      mountPath: /config
  containers:
  - name: jicofo
    image: "jitsi/jicofo:{{ jitsi_meet_version }}"
    resources:
      requests:
        memory: "1Gi"
      limits:
        memory: "4Gi"
    volumeMounts:
    - name: config
      subPath: jicofo
      mountPath: /config
    env:
    - name: XMPP_SERVER
      value: 127.0.0.1
    - name: XMPP_DOMAIN
      value: meet.jitsi
    - name: XMPP_AUTH_DOMAIN
      value: auth.meet.jitsi
    - name: XMPP_INTERNAL_MUC_DOMAIN
      value: internal-muc.meet.jitsi

    - name: JICOFO_COMPONENT_SECRET
      value: "{{ jitsi_meet_secrets.jicofo_component_secret }}"
    - name: JICOFO_AUTH_USER
      value: focus
    - name: JICOFO_AUTH_PASSWORD
      value: "{{ jitsi_meet_secrets.jicofo_auth_password }}"

    - name: JVB_BREWERY_MUC
      value: jvbbrewery

    - name: TZ
      value: {{ jitsi_meet_timezone }}

  - name: prosody
    image: "jitsi/prosody:{{ jitsi_meet_version }}"
    resources:
      requests:
        memory: "128Mi"
      limits:
        memory: "512Mi"
    volumeMounts:
    - name: scripts
      subPath: prosody/cont-init.sh
      mountPath: /etc/cont-init.d/99-k8s
    - name: config
      subPath: prosody
      mountPath: /config
    env:
    - name: XMPP_DOMAIN
      value: meet.jitsi
    - name: XMPP_AUTH_DOMAIN
      value: auth.meet.jitsi
    - name: XMPP_MUC_DOMAIN
      value: muc.meet.jitsi
    - name: XMPP_INTERNAL_MUC_DOMAIN
      value: internal-muc.meet.jitsi

    - name: JICOFO_COMPONENT_SECRET
      value: "{{ jitsi_meet_secrets.jicofo_component_secret }}"
    - name: JICOFO_AUTH_USER
      value: focus
    - name: JICOFO_AUTH_PASSWORD
      value: "{{ jitsi_meet_secrets.jicofo_auth_password }}"

    - name: JVB_AUTH_USER
      value: jvb
    - name: JVB_AUTH_PASSWORD
      value: "{{ jitsi_meet_secrets.jvb_auth_password }}"
    - name: JVB_TCP_HARVESTER_DISABLED
      value: "true"

    - name: TZ
      value: {{ jitsi_meet_timezone }}

  - name: web
    image: "jitsi/web:{{ jitsi_meet_version }}"
    resources:
      requests:
        memory: "256Mi"
      limits:
        memory: "1Gi"
    ports:
    - protocol: TCP
      containerPort: 80
      hostPort: {{ jitsi_meet_http_port }}
      hostIP: 127.0.0.1
    volumeMounts:
    - name: config
      subPath: web
      mountPath: /config
    env:
    - name: DISABLE_HTTPS
      value: "1"
    - name: ENABLE_HTTP_REDIRECT
      value: "0"

    - name: XMPP_SERVER
      value: 127.0.0.1
    - name: XMPP_DOMAIN
      value: meet.jitsi
    - name: XMPP_AUTH_DOMAIN
      value: auth.meet.jitsi
    - name: XMPP_INTERNAL_MUC_DOMAIN
      value: internal-muc.meet.jitsi
    - name: XMPP_BOSH_URL_BASE
      value: http://127.0.0.1:5280
    - name: XMPP_MUC_DOMAIN
      value: muc.meet.jitsi

    - name: JICOFO_AUTH_USER
      value: focus

    - name: JVB_TCP_HARVESTER_DISABLED
      value: "true"

    - name: TZ
      value: {{ jitsi_meet_timezone }}

  - name: jvb
    image: "jitsi/jvb:{{ jitsi_meet_version }}"
    resources:
      requests:
        memory: "1Gi"
      limits:
        memory: "4Gi"
    ports:
    - protocol: UDP
      containerPort: {{ jitsi_meet_jvb_port }}
      hostPort: {{ jitsi_meet_jvb_port }}
      hostIP: "{{ external_ip | default(ansible_default_ipv4.address) }}"
    volumeMounts:
    - name: config
      subPath: jvb
      mountPath: /config
    env:
    - name: XMPP_SERVER
      value: 127.0.0.1
    - name: XMPP_DOMAIN
      value: meet.jitsi
    - name: XMPP_AUTH_DOMAIN
      value: auth.meet.jitsi
    - name: XMPP_INTERNAL_MUC_DOMAIN
      value: internal-muc.meet.jitsi

    - name: JICOFO_AUTH_USER
      value: focus
    - name: JICOFO_AUTH_PASSWORD
      value: "{{ jitsi_meet_secrets.jicofo_auth_password }}"

    - name: JVB_AUTH_USER
      value: jvb
    - name: JVB_AUTH_PASSWORD
      value: "{{ jitsi_meet_secrets.jvb_auth_password }}"
    - name: JVB_BREWERY_MUC
      value: jvbbrewery
    - name: JVB_PORT
      value: "{{ jitsi_meet_jvb_port }}"
    - name: JVB_TCP_HARVESTER_DISABLED
      value: "true"
    - name: DOCKER_HOST_ADDRESS
      value: "{{ external_ip | default(ansible_default_ipv4.address) }}"

    - name: TZ
      value: {{ jitsi_meet_timezone }}

  volumes:
  - name: scripts
    hostPath:
      path: "{{ jitsi_meet_base_path }}/{{ jitsi_meet_inst_name }}/scripts"
  - name: config
    emptyDir:
      medium: Memory