Add jitsi container

docker-compose.yml

@@ -1,9 +1,9 @@
 # Options for building certificates
-#x-certs: &certs
-#  image: paulczar/omgwtfssl
-#  restart: "no"
-#  volumes:
-#    - certs:/certs
+x-certs: &certs
+  image: paulczar/omgwtfssl
+  restart: "no"
+  volumes:
+    - /opt/ssl:/certs
 
 version: "3.4"
 
@@ -67,8 +67,8 @@ services:
       - redis
       - nginx
     extra_hosts:
-      - "tower.scarif.local:${LOCAL_IP}"
-      - "office.scarif.local:${LOCAL_IP}" 
+      - "tower.scarif.space:${LOCAL_IP}"
+      - "office.scarif.space:${LOCAL_IP}" 
   
   collabora:
     image: collabora/code
@@ -90,8 +90,8 @@ services:
     networks:
       - nginx
     extra_hosts:
-      - "tower.scarif.local:${LOCAL_IP}"
-      - "office.scarif.local:${LOCAL_IP}" 
+      - "tower.scarif.space:${LOCAL_IP}"
+      - "office.scarif.space:${LOCAL_IP}" 
 
   pinry:
     image: 'getpinry/pinry'
@@ -133,19 +133,140 @@ services:
     depends_on:
       - db
 
-  cadvisor:
-    image: gcr.io/cadvisor/cadvisor:v0.37.0
+  jitsi:
+    image: jitsi/web:latest
+    restart: always
     volumes:
-      - /:/rootfs:ro
-      - /var/run:/var/run:ro
-      - /sys:/sys:ro
-      - /var/lib/docker/:/var/lib/docker:ro
-      - /dev/disk/:/dev/disk:ro
-    privileged: true
-    devices:
-      - /dev/kmsg
+      - /opt/jitsi/web:/config:Z
+      - /opt/jitsi/transcripts:/usr/share/jitsi-meet/transcripts:Z
+    environment:
+      - ENABLE_LETSENCRYPT=false
+      - ENABLE_HTTP_REDIRECT=false
+      - ENABLE_HSTS=false
+      - ENABLE_XMPP_WEBSOCKET=true
+      - DISABLE_HTTPS=true
+      - PUBLIC_URL=https://comms.${DOMAIN}
+      - TZ=UTC
+      - ENABLE_AUDIO_PROCESSING=true
+      - ENABLE_AUTH=true
+      - ENABLE_GUESTS=true
+      - ENABLE_LIPSYNC=true
+      - ENABLE_PREJOIN_PAGE=true
+      - ENABLE_WELCOME_PAGE=true
+      - ENABLE_CLOSE_PAGE=true
+      - ENABLE_REQUIRE_DISPLAY_NAME=false
+      - ENABLE_TALK_WHILE_MUTED=true
+      - JICOFO_AUTH_USER=focus
+      - DISABLE_AUDIO_LEVELS=false
+      - ENABLE_NOISY_MIC_DETECTION=true
+      - XMPP_AUTH_DOMAIN=auth.meet.jitsi
+      - XMPP_BOSH_URL_BASE=http://xmpp.meet.jitsi:5280
+      - XMPP_DOMAIN=meet.jitsi
+      - XMPP_GUEST_DOMAIN=guest.meet.jitsi
+      - XMPP_MUC_DOMAIN=muc.meet.jitsi
+      - XMPP_RECORDER_DOMAIN=recorder.meet.jitsi
     networks:
-      - nginx
+      nginx:
+      meet.jitsi:
+
+  # XMPP server
+  prosody:
+    image: jitsi/prosody:latest
+    restart: always
+    expose:
+      - '5222'
+      - '5347'
+      - '5280'
+    volumes:
+      - /opt/jitsi/prosody/config:/config:Z
+      - /opt/jitsi/prosody/prosody-plugins-custom:/prosody-plugins-custom:Z
+    environment:
+      - AUTH_TYPE=internal
+      - ENABLE_AUTH=true
+      - ENABLE_GUESTS=true
+      - ENABLE_LOBBY=true
+      - ENABLE_XMPP_WEBSOCKET=true
+
+      - XMPP_DOMAIN=meet.jitsi
+      - XMPP_AUTH_DOMAIN=auth.meet.jitsi
+      - XMPP_GUEST_DOMAIN=guest.meet.jitsi
+      - XMPP_MUC_DOMAIN=muc.meet.jitsi
+      - XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
+      - XMPP_RECORDER_DOMAIN=recorder.meet.jitsi
+      - JICOFO_COMPONENT_SECRET
+      - JICOFO_AUTH_USER=focus
+      - JICOFO_AUTH_PASSWORD
+      - JVB_AUTH_USER=jvb
+      - JVB_AUTH_PASSWORD
+      - JIGASI_XMPP_PASSWORD
+      - JIBRI_XMPP_PASSWORD
+      - JIBRI_RECORDER_PASSWORD
+      - PUBLIC_URL=https://comms.${DOMAIN}
+      - TZ=UTC
+    networks:
+      meet.jitsi:
+        aliases:
+          - xmpp.meet.jitsi
+
+  # Focus component
+  jicofo:
+    image: jitsi/jicofo:latest
+    restart: always
+    volumes:
+      - /opt/jitsi/jicofo:/config:Z
+    environment:
+      - AUTH_TYPE=internal
+      - ENABLE_AUTH=true
+      - XMPP_DOMAIN=meet.jitsi
+      - XMPP_AUTH_DOMAIN=auth.meet.jitsi
+      - XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
+      - XMPP_MUC_DOMAIN=muc.meet.jitsi
+      - XMPP_SERVER=xmpp.meet.jitsi
+      - JICOFO_COMPONENT_SECRET
+      - JICOFO_AUTH_USER=focus
+      - JICOFO_AUTH_PASSWORD
+      - JVB_BREWERY_MUC=jvbbrewery
+      - JIGASI_BREWERY_MUC=jigasibrewery
+      - JIBRI_BREWERY_MUC=jibribrewery
+      - JIBRI_PENDING_TIMEOUT=90
+      - TZ=UTC
+    depends_on:
+      - prosody
+    networks:
+      meet.jitsi:
+
+  # Video bridge
+  jvb:
+    image: jitsi/jvb:latest
+    restart: always
+    ports:
+      - '10000:10000/udp'
+      - '4443:4443'
+    volumes:
+      - /opt/jitsi/jvb:/config:Z
+    environment:
+      - DOCKER_HOST_ADDRESS=${LOCAL_IP}
+      - XMPP_AUTH_DOMAIN=meet.jitsi
+      - XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
+      - XMPP_SERVER=xmpp.meet.jitsi
+      - JVB_AUTH_USER=jvb
+      - JVB_AUTH_PASSWORD
+      - JVB_BREWERY_MUC=jvbbrewery
+      - JVB_PORT=10000
+      - JVB_TCP_HARVESTER_DISABLED=true
+      - JVB_TCP_PORT=4443
+      - JVB_TCP_MAPPED_PORT=4443
+      - JVB_STUN_SERVERS=meet-jit-si-turnrelay.jitsi.net:443
+      - JVB_ENABLE_APIS=
+      - PUBLIC_URL=https://comms.${DOMAIN}
+      - TZ=UTC
+    depends_on:
+      - prosody
+    networks:
+      meet.jitsi:
+        aliases:
+          - jvb.meet.jitsi
+
 
   db:
     image: mariadb
@@ -182,7 +303,6 @@ services:
       - nextcloud
       - gitea
       - collabora
-      - cadvisor
       - pinry
     ports:
       - 80:80
@@ -205,7 +325,6 @@ volumes:
   monica-public:
   monica-data:
   nextcloud:
-  #certs:
   dashboard:
   pinry:
 
@@ -213,3 +332,4 @@ networks:
   db:
   nginx:
   redis:
+  meet.jitsi: