Quellcode durchsuchen

Updates manual install doc with auth.domain certs instructions.

master
damencho vor 7 Jahren
Ursprung
Commit
3ac41bb0c3
2 geänderte Dateien mit 19 neuen und 1 gelöschten Zeilen
  1. 8
    1
      doc/example-config-files/prosody.cfg.lua.example
  2. 11
    0
      doc/manual-install.md

+ 8
- 1
doc/example-config-files/prosody.cfg.lua.example Datei anzeigen

@@ -45,7 +45,7 @@ modules_enabled = {
45 45
 	-- Not essential, but recommended
46 46
 		"private"; -- Private XML storage (for room bookmarks, etc.)
47 47
 		"vcard"; -- Allow users to set vCards
48
-	
48
+
49 49
 	-- These are commented by default as they have a performance impact
50 50
 		--"privacy"; -- Support privacy lists
51 51
 		"compression"; -- Stream compression (requires the lua-zlib package installed)
@@ -181,6 +181,13 @@ VirtualHost "jitsi.example.com"
181 181
 
182 182
 	c2s_require_encryption = false
183 183
 
184
+VirtualHost "auth.jitsi.example.com"
185
+	ssl = {
186
+		key = "/var/lib/prosody/auth.jitsi.example.com.key";
187
+		certificate = "/var/lib/prosody/auth.jitsi.example.com.crt";
188
+	}
189
+	authentication = "internal_plain"
190
+
184 191
 ------ Components ------
185 192
 -- You can specify components to add hosts that provide special services,
186 193
 -- like multi-user conferences, and transports.

+ 11
- 0
doc/manual-install.md Datei anzeigen

@@ -60,6 +60,10 @@ VirtualHost "jitsi.example.com"
60 60
 - add domain with authentication for conference focus user:
61 61
 ```
62 62
 VirtualHost "auth.jitsi.example.com"
63
+    ssl = {
64
+        key = "/var/lib/prosody/auth.jitsi.example.com.key";
65
+        certificate = "/var/lib/prosody/auth.jitsi.example.com.crt";
66
+    }
63 67
     authentication = "internal_plain"
64 68
 ```
65 69
 - add focus user to server admins:
@@ -83,6 +87,13 @@ ln -s /etc/prosody/conf.avail/jitsi.example.com.cfg.lua /etc/prosody/conf.d/jits
83 87
 Generate certs for the domain:
84 88
 ```sh
85 89
 prosodyctl cert generate jitsi.example.com
90
+prosodyctl cert generate auth.jitsi.example.com
91
+```
92
+
93
+Add auth.jitsi.example.com to the trusted certificates on the local machine:
94
+```sh
95
+ln -sf /var/lib/prosody/auth.jitsi.example.com.crt /usr/local/share/ca-certificates/auth.jitsi.example.com.crt
96
+update-ca-certificates
86 97
 ```
87 98
 
88 99
 Create conference focus user:

Laden…
Abbrechen
Speichern