|
@@ -40,7 +40,9 @@ case "$1" in
|
40
|
40
|
db_get jitsi-meet-turnserver/jvb-hostname
|
41
|
41
|
JVB_HOSTNAME_OLD=$RET
|
42
|
42
|
if [ -n "$RET" ] && [ ! "$JVB_HOSTNAME_OLD" = "$JVB_HOSTNAME" ] ; then
|
43
|
|
- rm -f $TURN_CONFIG
|
|
43
|
+ if [[ -f $TURN_CONFIG ]] && grep -q "jitsi-meet coturn config" "$TURN_CONFIG" ; then
|
|
44
|
+ rm -f $TURN_CONFIG
|
|
45
|
+ fi
|
44
|
46
|
fi
|
45
|
47
|
|
46
|
48
|
# this detect only old installations with no nginx
|
|
@@ -54,6 +56,14 @@ case "$1" in
|
54
|
56
|
exit 0
|
55
|
57
|
fi
|
56
|
58
|
|
|
59
|
+ if [[ -f $TURN_CONFIG ]] ; then
|
|
60
|
+ echo ""
|
|
61
|
+ echo "turnserver is already configured on this machine, skipping."
|
|
62
|
+ echo ""
|
|
63
|
+ db_stop
|
|
64
|
+ exit 0
|
|
65
|
+ fi
|
|
66
|
+
|
57
|
67
|
# stores the hostname so we will reuse it later, like in purge
|
58
|
68
|
db_set jitsi-meet-turnserver/jvb-hostname "$JVB_HOSTNAME"
|
59
|
69
|
|
|
@@ -65,46 +75,45 @@ case "$1" in
|
65
|
75
|
fi
|
66
|
76
|
TURN_SECRET="$RET"
|
67
|
77
|
|
68
|
|
- if [[ -f $TURN_CONFIG ]] && ! grep -q "jitsi-meet coturn config" "$TURN_CONFIG" ; then
|
69
|
|
- PUBLIC_IP=$(dig +short myip.opendns.com @resolver1.opendns.com)
|
70
|
|
- cp /usr/share/jitsi-meet-turnserver/turnserver.conf $TURN_CONFIG
|
71
|
|
- sed -i "s/jitsi-meet.example.com/$JVB_HOSTNAME/g" $TURN_CONFIG
|
72
|
|
- sed -i "s/__turnSecret__/$TURN_SECRET/g" $TURN_CONFIG
|
73
|
|
- sed -i "s/__external_ip_address__/$JVB_HOSTNAME/g" $TURN_CONFIG
|
74
|
|
-
|
75
|
|
- # SSL for nginx
|
76
|
|
- db_get jitsi-meet/cert-choice
|
77
|
|
- CERT_CHOICE="$RET"
|
78
|
|
-
|
79
|
|
- if [ "$CERT_CHOICE" = "I want to use my own certificate" ] ; then
|
80
|
|
- db_get jitsi-meet/cert-path-key
|
81
|
|
- CERT_KEY="$RET"
|
82
|
|
- db_get jitsi-meet/cert-path-crt
|
83
|
|
- CERT_CRT="$RET"
|
84
|
|
-
|
85
|
|
- # replace self-signed certificate paths with user provided ones
|
86
|
|
- CERT_KEY_ESC=$(echo $CERT_KEY | sed 's/\./\\\./g')
|
87
|
|
- CERT_KEY_ESC=$(echo $CERT_KEY_ESC | sed 's/\//\\\//g')
|
88
|
|
- sed -i "s/pkey=\/etc\/jitsi\/meet\/.*key/pkey=$CERT_KEY_ESC/g" $TURN_CONFIG
|
89
|
|
- CERT_CRT_ESC=$(echo $CERT_CRT | sed 's/\./\\\./g')
|
90
|
|
- CERT_CRT_ESC=$(echo $CERT_CRT_ESC | sed 's/\//\\\//g')
|
91
|
|
- sed -i "s/cert=\/etc\/jitsi\/meet\/.*crt/cert=$CERT_CRT_ESC/g" $TURN_CONFIG
|
92
|
|
- fi
|
|
78
|
+ # no turn config exists, lt's copy template and fill it in
|
|
79
|
+ PUBLIC_IP=$(dig +short myip.opendns.com @resolver1.opendns.com)
|
|
80
|
+ cp /usr/share/jitsi-meet-turnserver/turnserver.conf $TURN_CONFIG
|
|
81
|
+ sed -i "s/jitsi-meet.example.com/$JVB_HOSTNAME/g" $TURN_CONFIG
|
|
82
|
+ sed -i "s/__turnSecret__/$TURN_SECRET/g" $TURN_CONFIG
|
|
83
|
+ sed -i "s/__external_ip_address__/$JVB_HOSTNAME/g" $TURN_CONFIG
|
|
84
|
+
|
|
85
|
+ # SSL for nginx
|
|
86
|
+ db_get jitsi-meet/cert-choice
|
|
87
|
+ CERT_CHOICE="$RET"
|
|
88
|
+
|
|
89
|
+ if [ "$CERT_CHOICE" = "I want to use my own certificate" ] ; then
|
|
90
|
+ db_get jitsi-meet/cert-path-key
|
|
91
|
+ CERT_KEY="$RET"
|
|
92
|
+ db_get jitsi-meet/cert-path-crt
|
|
93
|
+ CERT_CRT="$RET"
|
|
94
|
+
|
|
95
|
+ # replace self-signed certificate paths with user provided ones
|
|
96
|
+ CERT_KEY_ESC=$(echo $CERT_KEY | sed 's/\./\\\./g')
|
|
97
|
+ CERT_KEY_ESC=$(echo $CERT_KEY_ESC | sed 's/\//\\\//g')
|
|
98
|
+ sed -i "s/pkey=\/etc\/jitsi\/meet\/.*key/pkey=$CERT_KEY_ESC/g" $TURN_CONFIG
|
|
99
|
+ CERT_CRT_ESC=$(echo $CERT_CRT | sed 's/\./\\\./g')
|
|
100
|
+ CERT_CRT_ESC=$(echo $CERT_CRT_ESC | sed 's/\//\\\//g')
|
|
101
|
+ sed -i "s/cert=\/etc\/jitsi\/meet\/.*crt/cert=$CERT_CRT_ESC/g" $TURN_CONFIG
|
|
102
|
+ fi
|
93
|
103
|
|
94
|
|
- sed -i "s/#TURNSERVER_ENABLED/TURNSERVER_ENABLED/g" /etc/default/coturn
|
95
|
|
- invoke-rc.d coturn restart || true
|
|
104
|
+ sed -i "s/#TURNSERVER_ENABLED/TURNSERVER_ENABLED/g" /etc/default/coturn
|
|
105
|
+ invoke-rc.d coturn restart || true
|
96
|
106
|
|
97
|
|
- NGINX_STREAM_CONFIG="/etc/nginx/modules-enabled/60-jitsi-meet.conf"
|
98
|
|
- if [ -f $NGINX_STREAM_CONFIG ] && [ -f $NGINX_CONFIG ] ; then
|
99
|
|
- sed -i "s/listen 443 ssl/listen 4444 ssl http2/g" $NGINX_CONFIG
|
100
|
|
- sed -i "s/listen \[\:\:\]\:443 ssl/listen \[\:\:\]\:4444 ssl http2/g" $NGINX_CONFIG
|
101
|
|
- invoke-rc.d nginx reload || true
|
102
|
|
- fi
|
|
107
|
+ NGINX_STREAM_CONFIG="/etc/nginx/modules-enabled/60-jitsi-meet.conf"
|
|
108
|
+ if [ -f $NGINX_STREAM_CONFIG ] && [ -f $NGINX_CONFIG ] ; then
|
|
109
|
+ sed -i "s/listen 443 ssl/listen 4444 ssl http2/g" $NGINX_CONFIG
|
|
110
|
+ sed -i "s/listen \[\:\:\]\:443 ssl/listen \[\:\:\]\:4444 ssl http2/g" $NGINX_CONFIG
|
|
111
|
+ invoke-rc.d nginx reload || true
|
|
112
|
+ fi
|
103
|
113
|
|
104
|
|
- # Enable turn server in config.js
|
105
|
|
- if [ -f $JITSI_MEET_CONFIG ] ; then
|
106
|
|
- sed -i "s/\/\/ useStunTurn: true/useStunTurn: true/g" $JITSI_MEET_CONFIG
|
107
|
|
- fi
|
|
114
|
+ # Enable turn server in config.js
|
|
115
|
+ if [ -f $JITSI_MEET_CONFIG ] ; then
|
|
116
|
+ sed -i "s/\/\/ useStunTurn: true/useStunTurn: true/g" $JITSI_MEET_CONFIG
|
108
|
117
|
fi
|
109
|
118
|
|
110
|
119
|
# and we're done with debconf
|