This repository has no description
1.5 kB
50 lines
1{ ... }:
2{
3
4 nixpkgs.config.permittedInsecurePackages = [
5 "jitsi-meet-1.0.8792"
6 ];
7 services.jitsi-meet = {
8 enable = true;
9 hostName = "jitsi.lassul.us";
10 config = {
11 enableWelcomePage = true;
12 requireDisplayName = true;
13 analytics.disabled = true;
14 stunServers = [
15 # - https://www.kuketz-blog.de/jitsi-meet-server-einstellungen-fuer-einen-datenschutzfreundlichen-betrieb/
16 { urls = "turn:turn.matrix.org:3478?transport=udp"; }
17 { urls = "turn:turn.matrix.org:3478?transport=tcp"; }
18 ];
19 };
20 interfaceConfig = {
21 SHOW_JITSI_WATERMARK = false;
22 SHOW_WATERMARK_FOR_GUESTS = false;
23 GENERATE_ROOMNAMES_ON_WELCOME_PAGE = false;
24 DISABLE_PRESENCE_STATUS = true;
25 DEFAULT_REMOTE_DISPLAY_NAME = "Fellow Nixer";
26 };
27 };
28
29 # Disable AWS harvester (not needed) and configure NAT harvester
30 # so clients can establish media connections through NAT
31 services.jitsi-videobridge.extraProperties = {
32 "org.ice4j.ice.harvest.DISABLE_AWS_HARVESTER" = "true";
33 "org.ice4j.ice.harvest.NAT_HARVESTER_LOCAL_ADDRESS" = "0.0.0.0";
34 "org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS" = "95.217.192.59";
35 };
36
37 services.prosody.checkConfig = false;
38
39 services.nginx.virtualHosts."meet.lassul.us" = {
40 enableACME = true;
41 addSSL = true;
42 locations."/".return = "301 https://jitsi.lassul.us$request_uri";
43 };
44
45 networking.firewall.allowedTCPPorts = [
46 4443
47 10000
48 ];
49 networking.firewall.allowedUDPPorts = [ 10000 ];
50}