diff --git a/compose/production/traefik/traefik.toml.template b/compose/production/traefik/traefik.toml.template index 1a1ce2b..4050172 100644 --- a/compose/production/traefik/traefik.toml.template +++ b/compose/production/traefik/traefik.toml.template @@ -68,6 +68,10 @@ defaultEntryPoints = ["http"] [backends.jellyfin.servers.server1] url = "http://jellyfin:8096" + [backends.jitsi] + [backends.jitsi.servers.server1] + url = "http://jitsi-web:80" + [backends.raspap] [backends.raspap.servers.server1] url = "http://raspap:80" @@ -149,6 +153,14 @@ defaultEntryPoints = ["http"] HostsProxyHeaders = ['X-CSRFToken'] [frontends.jellyfin.routes.dr1] rule = "Host:jellyfin.mistborn" + + [frontends.jitsi] + backend = "jitsi" + passHostHeader = true + [frontends.jitsi.headers] + HostsProxyHeaders = ['X-CSRFToken'] + [frontends.jitsi.routes.dr1] + rule = "Host:jitsi.mistborn" [frontends.raspap] backend = "raspap" diff --git a/extra/jitsi-meet.yml b/extra/jitsi-meet.yml index 687c3af..83a29a6 100644 --- a/extra/jitsi-meet.yml +++ b/extra/jitsi-meet.yml @@ -4,9 +4,12 @@ services: # Frontend jitsi-web: image: jitsi/web - ports: - - '${HTTP_PORT}:80' - - '${HTTPS_PORT}:443' + #ports: + #- '${HTTP_PORT}:80' + #- '${HTTPS_PORT}:443' + labels: + - "traefik.enable=true" + - "traefik.port=${HTTP_PORT}" volumes: - ${CONFIG}/web:/config - ${CONFIG}/web/letsencrypt:/etc/letsencrypt @@ -40,6 +43,7 @@ services: - JIBRI_RECORDER_PASSWORD - ENABLE_RECORDING networks: + default: meet.jitsi: aliases: - ${XMPP_DOMAIN} diff --git a/scripts/conf/jitsi.env b/scripts/conf/jitsi.env index c1158b6..dafff01 100644 --- a/scripts/conf/jitsi.env +++ b/scripts/conf/jitsi.env @@ -7,7 +7,7 @@ CONFIG=../.envs/.production/.jitsi-cfg # Exposed HTTP port. -HTTP_PORT=8000 +HTTP_PORT=80 # Exposed HTTPS port. HTTPS_PORT=8443 @@ -301,7 +301,7 @@ JIBRI_STRIP_DOMAIN_JID=muc JIBRI_LOGS_DIR=/config/logs # Disable HTTPS. This can be useful if TLS connections are going to be handled outside of this setup. -#DISABLE_HTTPS=1 +DISABLE_HTTPS=1 # Redirects HTTP traffic to HTTPS. Only works with the standard HTTPS port (443). #ENABLE_HTTP_REDIRECT=1