Compare commits
42 Commits
Author | SHA1 | Date |
---|---|---|
Luis Guzmán | a290c636ba | |
Luis Guzmán | 67442f6133 | |
Luis Guzmán | 2a58bdd8a6 | |
Luis Guzmán | b8b15b4e9c | |
Luis Guzmán | aec2d9898c | |
Luis Guzmán | f557e3cc2f | |
Luis Guzmán | a7a9768b6f | |
Luis Guzmán | cda665246e | |
Luis Guzmán | a943997ea9 | |
Luis Guzmán | 2da6a817e8 | |
Luis Guzmán | d86fb7bf3c | |
Luis Guzmán | b7e81a0499 | |
Luis Guzmán | b9eecab00d | |
Luis Guzmán | 3a35cfa1b4 | |
Luis Guzmán | 79c5ea566f | |
Luis Guzmán | a40d5f5aa8 | |
Luis Guzmán | 5a9ae4d5f5 | |
Luis Guzmán | 079ddfde03 | |
Luis Guzmán | de6217c74d | |
Luis Guzmán | 9776c5e034 | |
Luis Guzmán | 725bc8dda7 | |
Luis Guzmán | 256c85a250 | |
Luis Guzmán | 807fcd52df | |
Luis Guzmán | 8b6c071d47 | |
Luis Guzmán | a2a5c590b0 | |
Luis Guzmán | 86e39afa5c | |
Luis Guzmán | 5c7dfb9984 | |
Luis Guzmán | 20e1f7b362 | |
Luis Guzmán | d1f3009844 | |
Luis Guzmán | 7de6201af6 | |
Luis Guzmán | 5ac6c8269a | |
Luis Guzmán | a5c8f2f93f | |
Luis Guzmán | 390aa1bc0b | |
Luis Guzmán | 5226133ce7 | |
Luis Guzmán | 43ec159b71 | |
Luis Guzmán | 1753a5a401 | |
Luis Guzmán | c633c11149 | |
Luis Guzmán | 1bd3f86cc4 | |
Luis Guzmán | 4bc234b6bd | |
Luis Guzmán | 9bd5916f24 | |
Luis Guzman | c556770eda | |
Luis Guzman | ccec4a0ab6 |
|
@ -1,3 +0,0 @@
|
|||
# These are supported funding model platforms
|
||||
|
||||
custom: ["https://www.paypal.me/switnet", switnet.net]
|
10
README.md
10
README.md
|
@ -11,7 +11,7 @@ As for our current latest release, as we have integrated more and more features,
|
|||
Login into your clean server, clone git repository and run the installer,
|
||||
|
||||
```
|
||||
git clone https://github.com/switnet-ltd/quick-jibri-installer
|
||||
git clone https://forge.switnet.net/switnet/quick-jibri-installer
|
||||
cd quick-jibri-installer
|
||||
sudo bash quick_jibri_installer.sh
|
||||
```
|
||||
|
@ -48,7 +48,7 @@ Check more details on our wiki.
|
|||
## Requirements
|
||||
1. Clean VM/VPS/Server using a supported Ubuntu LTS
|
||||
2. Valid domain with DNS record, **mandatory** for SSL certs via Let's Encrypt.
|
||||
3. open ports for JMS interaction, [see wiki](https://github.com/switnet-ltd/quick-jibri-installer/wiki/Firewall).
|
||||
3. open ports for JMS interaction, [see wiki](https://forge.switnet.net/switnet/quick-jibri-installer/wiki/Firewall).
|
||||
4. Starting at 8 GB RAM / 4 Cores @ ~3.0GHz
|
||||
* Adding resources as your audience or features you require, so your experience don't suffer from the lack of resources.
|
||||
5. Webcam
|
||||
|
@ -73,7 +73,7 @@ Feel free to use our `test-jibri-env.sh` tool to find some details on your curre
|
|||
* Enabled Session Recording via Jibri
|
||||
* Rename Jibri folder with name room + date.
|
||||
* Jibri node network.
|
||||
* Automatic Jibri nodes network sync ([see more](https://github.com/switnet-ltd/quick-jibri-installer/wiki/Setup-and-Jibri-Nodes)).
|
||||
* Automatic Jibri nodes network sync ([see more](https://forge.switnet.net/switnet/quick-jibri-installer/wiki/Setup-and-Jibri-Nodes)).
|
||||
* JRA (Jibri Recordings Access) via Nextcloud
|
||||
* Grafana Dashboard
|
||||
* Etherpad via docker install
|
||||
|
@ -115,8 +115,8 @@ Feel free to use our `test-jibri-env.sh` tool to find some details on your curre
|
|||
|
||||
|
||||
## Documentation
|
||||
* Please check our [wiki](https://github.com/switnet-ltd/quick-jibri-installer/wiki) for further documentation.
|
||||
* Please check our [wiki](https://forge.switnet.net/switnet/quick-jibri-installer/wiki) for further documentation.
|
||||
|
||||
Please note: This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY.
|
||||
|
||||
SwITNet Ltd © - 2022, https://switnet.net/
|
||||
SwITNet Ltd © - 2024, https://switnet.net/
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# Jibri Node Aggregator
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
### 0_LAST EDITION TIME STAMP ###
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# JVB2 Node Aggregator
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
### 0_LAST EDITION TIME STAMP ###
|
||||
|
|
46
changelog
46
changelog
|
@ -1,3 +1,49 @@
|
|||
quick-jibri-installer (7.3.0)
|
||||
|
||||
* excalibur: add installer for whiteboard feature.
|
||||
* quick_jibri_installer.sh: add excalidraw whiteboard backend
|
||||
disable jigasi selector
|
||||
add sed check test
|
||||
update features list
|
||||
* misc: update repository address to new home.
|
||||
* misc: update year to late 2023.
|
||||
|
||||
-- Software, IT & Networks <info@switnet.net> Sat, 11 Nov 2023 21:18:29 -0600
|
||||
|
||||
quick-jibri-installer (7.2.1)
|
||||
|
||||
* changelog: update previous version.
|
||||
* quick_jibri_installer.sh: fix deprecated nodejs repo setup,
|
||||
add printwc function
|
||||
|
||||
-- Software, IT & Networks <info@switnet.net> Sun, 22 Oct 2023 17:00:30 -0600
|
||||
|
||||
quick-jibri-installer (7.2.0)
|
||||
|
||||
* changelog: update previous version.
|
||||
* quick_jibri_installer.sh: rearrange chromedriver variables.
|
||||
* quick_jibri_installer.sh: fix empty varible usage.
|
||||
* quick_jibri_installer.sh: update nodejs to a stable release.
|
||||
* quick_jibri_installer.sh,jitsi-updater.sh: update chromedriver 115+ version download.
|
||||
* jra_nextcloud.sh: organize functions, add apt checks, higher password lenght and small fixes.
|
||||
* jitsi-updater.sh: fix check chrome driver version.
|
||||
|
||||
-- Software, IT & Networks <info@switnet.net> Wed Aug 23 00:51:24 2023 -0600
|
||||
|
||||
quick-jibri-installer (7.1.0)
|
||||
|
||||
* changelog: add changelog
|
||||
* quick_jibri_installer.sh: increase support to 22.04
|
||||
fix key aggregation and remove deprecated letsencrypt ppa
|
||||
* etherpad-docker.sh: fix key aggregation and variable collection.
|
||||
* grafana.sh: fix gpg key aggregation
|
||||
* jm-bm.sh: tweak sed
|
||||
* jra_nextcloud.sh: fix key aggregation and variable collection.
|
||||
* jra_nextcloud.sh: fix add gpg key function and add install available version package
|
||||
* jra_nextcloud.sh: small fix for install_aval_package function
|
||||
|
||||
-- Software, IT & Networks <info@switnet.net> Wed Feb 22 05:56:20 2023 -0600
|
||||
|
||||
quick-jibri-installer (7.0.8)
|
||||
|
||||
* jitsi-updater.sh: add checks for openjdk and nodejs supported versions
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# Etherpad Installer for Jitsi Meet
|
||||
# SwITNet Ltd © - 2020, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
#
|
||||
# GPLv3 or later.
|
||||
|
||||
|
@ -115,7 +115,7 @@ elif [ -f "$WS_CONF" ]; then
|
|||
sed -i "/# ensure all static content can always be found first/i \\\n" "$WS_CONF"
|
||||
else
|
||||
echo "> No etherpad config done to server file, please report to:
|
||||
-> https://github.com/switnet-ltd/quick-jibri-installer/issues"
|
||||
-> https://forge.switnet.net/switnet/quick-jibri-installer/issues"
|
||||
fi
|
||||
|
||||
# Configure config.js
|
||||
|
@ -134,5 +134,5 @@ if nginx -t 2>/dev/null ; then
|
|||
else
|
||||
echo "Please check your configuration, something may be wrong."
|
||||
echo "Will not try to enable etherpad nginx configuration, please report to:
|
||||
-> https://github.com/switnet-ltd/quick-jibri-installer/issues"
|
||||
-> https://forge.switnet.net/switnet/quick-jibri-installer/issues"
|
||||
fi
|
||||
|
|
|
@ -0,0 +1,208 @@
|
|||
#!/bin/bash
|
||||
# Excalidraw Jitsi Backend Installer
|
||||
#
|
||||
# Based on:
|
||||
# - https://community.jitsi.org/t/118883
|
||||
#
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
# Reset
|
||||
Color_Off='\e[0m' # Text Reset
|
||||
# Regular Colors
|
||||
Black='\e[0;30m' # Black
|
||||
Red='\e[0;31m' # Red
|
||||
Green='\e[0;32m' # Green
|
||||
Yellow='\e[0;33m' # Yellow
|
||||
Blue='\e[0;34m' # Blue
|
||||
Purple='\e[0;35m' # Purple
|
||||
Cyan='\e[0;36m' # Cyan
|
||||
|
||||
printwc() {
|
||||
printf "%b$2%b" "$1" "${Color_Off}"
|
||||
}
|
||||
print_title() {
|
||||
printwc "${Blue}" "\n#--------------------------------------------------"
|
||||
printwc "${Blue}" "\n# $1"
|
||||
printwc "${Blue}" "\n#--------------------------------------------------\n"
|
||||
}
|
||||
restart_jibri() {
|
||||
if [ "$(dpkg-query -W -f='${Status}' "jibri" 2>/dev/null | grep -c "ok installed")" == "1" ]
|
||||
then
|
||||
systemctl restart jibri
|
||||
systemctl restart jibri-icewm
|
||||
systemctl restart jibri-xorg
|
||||
else
|
||||
echo "Jibri service not installed"
|
||||
fi
|
||||
}
|
||||
restart_services() {
|
||||
systemctl restart jitsi-videobridge2
|
||||
systemctl restart jicofo
|
||||
restart_jibri
|
||||
systemctl restart prosody
|
||||
}
|
||||
test_match() {
|
||||
if grep -q "$1" "$2" ; then
|
||||
echo "$(basename "$2") - OK..."
|
||||
else
|
||||
echo "$(basename "$2"), FAIL..."
|
||||
echo "Please report this to https://forge.switnet.net/switnet/quick-jibri-installer"
|
||||
exit
|
||||
fi
|
||||
}
|
||||
|
||||
while getopts m: option
|
||||
do
|
||||
case "${option}"
|
||||
in
|
||||
m) MODE=${OPTARG};;
|
||||
\?) echo "Usage: sudo bash ./$0 [-m debug]" && exit;;
|
||||
esac
|
||||
done
|
||||
|
||||
#DEBUG
|
||||
if [ "$MODE" = "debug" ]; then
|
||||
set -x
|
||||
fi
|
||||
|
||||
if ! [ "$(id -u)" = 0 ]; then
|
||||
echo "You need to be root or have sudo privileges!"
|
||||
exit 0
|
||||
fi
|
||||
clear
|
||||
echo -e '\n
|
||||
########################################################################
|
||||
Excalidraw Jitsi Backend Installer
|
||||
########################################################################
|
||||
by Software, IT & Networks Ltd
|
||||
\n'
|
||||
|
||||
DOMAIN="$(find /etc/prosody/conf.d/ -name \*.lua|awk -F'.cfg' '!/localhost/{print $1}'|xargs basename)"
|
||||
WS_CONF="/etc/nginx/sites-available/$DOMAIN.conf"
|
||||
PROSODY_FILE="/etc/prosody/conf.d/$DOMAIN.cfg.lua"
|
||||
MEET_CONF="/etc/jitsi/meet/$DOMAIN-config.js"
|
||||
WS_MATCH1='# ensure all static content can always be found first'
|
||||
PROS_MATCH1='"av_moderation";'
|
||||
PROS_MATCH2='breakout_rooms_muc = "breakout.'
|
||||
PROS_MATCH3='VirtualHost "recorder.'
|
||||
CONFIG_MATCH1='List of undocumented settings used in jitsi-meet'
|
||||
EXCALIDRAW_HOME="/opt/excalidraw"
|
||||
EXCAL_MATCH1="prometheus.metrics(io"
|
||||
EXCAL_NEW_PORT="9091"
|
||||
EXCAL_PORT_FILE="$EXCALIDRAW_HOME/backend/src/index.ts"
|
||||
|
||||
# Make sure we can rely on the match strings.
|
||||
printf "Testing match strings on config files.\n"
|
||||
test_match "$WS_MATCH1" "$WS_CONF"
|
||||
test_match "$PROS_MATCH1" "$PROSODY_FILE"
|
||||
test_match "$PROS_MATCH2" "$PROSODY_FILE"
|
||||
test_match "$PROS_MATCH3" "$PROSODY_FILE"
|
||||
test_match "$PROS_MATCH3" "$PROSODY_FILE"
|
||||
test_match "$CONFIG_MATCH1" "$MEET_CONF"
|
||||
|
||||
#--------------------------------------------------
|
||||
print_title "Setup excalidraw backend."
|
||||
#--------------------------------------------------
|
||||
adduser --home "$EXCALIDRAW_HOME" --disabled-password --gecos "" excalidraw
|
||||
git clone https://github.com/jitsi/excalidraw-backend "$EXCALIDRAW_HOME/backend"
|
||||
test_match "$EXCAL_MATCH1" "$EXCAL_PORT_FILE"
|
||||
|
||||
chown -R excalidraw:excalidraw "$EXCALIDRAW_HOME"
|
||||
cd "$EXCALIDRAW_HOME/backend"
|
||||
sudo -u excalidraw cp .env.development .env.production
|
||||
|
||||
# Use documented port to get some sort of standarization.
|
||||
if sed -n "/$EXCAL_MATCH1/,/});/p" "$EXCAL_PORT_FILE" |grep -q port: ; then
|
||||
echo -e "> Update predefined port for metrics to $EXCAL_NEW_PORT\n"
|
||||
sed -i "/$EXCAL_MATCH1/,/});/s|port:.*,|port: $EXCAL_NEW_PORT,|" "$EXCAL_PORT_FILE"
|
||||
else
|
||||
echo -e "> Define new port from default to $EXCAL_NEW_PORT\n"
|
||||
sed -i "/$EXCAL_MATCH1/a \ \ \ \ port: $EXCAL_NEW_PORT," "$EXCAL_PORT_FILE"
|
||||
fi
|
||||
|
||||
printf "Installing npm backend.\n"
|
||||
sudo -u excalidraw npm install
|
||||
sudo -u excalidraw npm run build
|
||||
|
||||
#--------------------------------------------------
|
||||
print_title "Setup system & jitsi config files."
|
||||
#--------------------------------------------------
|
||||
# Enable websocket on nginx
|
||||
sed -i "/$WS_MATCH1/i \\\n" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ location = /socket.io/ {" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ \ \ \ \ proxy_pass http://127.0.0.1:3002/socket.io/?\$args;" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ \ \ \ \ proxy_http_version 1.1;" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ \ \ \ \ proxy_set_header Upgrade \$http_upgrade;" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ \ \ \ \ proxy_set_header Connection \"upgrade\";" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ \ \ \ \ proxy_set_header Host \$http_host;" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ \ \ \ \ tcp_nodelay on;" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ }" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \\\n" "$WS_CONF"
|
||||
|
||||
if grep -rq room_metadata /etc/prosody/conf.d/ ;then
|
||||
echo "> Prosody seems to be already configured."
|
||||
else
|
||||
echo "> Setting up prosody for whiteboard..."
|
||||
# Modules enabled
|
||||
sed -i "/$PROS_MATCH1/a \ \ \ \ \ \ \ \ \"room_metadata\";" "$PROSODY_FILE"
|
||||
# Define internal component
|
||||
sed -i "/$PROS_MATCH2/a \ \ \ \ room_metadata_component = \"metadata.$DOMAIN\"" "$PROSODY_FILE"
|
||||
# Register component
|
||||
sed -i "/$PROS_MATCH3/i \\\n" "$PROSODY_FILE"
|
||||
sed -i "/$PROS_MATCH3/i Component \"metadata.$DOMAIN\" \"room_metadata_component\"" "$PROSODY_FILE"
|
||||
sed -i "/$PROS_MATCH3/i \ \ \ \ muc_component = \"conference.$DOMAIN\"" "$PROSODY_FILE"
|
||||
sed -i "/$PROS_MATCH3/i \ \ \ \ breakout_rooms_component = \"breakout.$DOMAIN\"" "$PROSODY_FILE"
|
||||
sed -i "/$PROS_MATCH3/i \\\n" "$PROSODY_FILE"
|
||||
fi
|
||||
|
||||
printf "\n# Checking for whitebord setup at %s.\n" "$(basename "$MEET_CONF")"
|
||||
if [ -z "$(sed -n '/whiteboard: {/,/},/p' "$MEET_CONF")" ]; then
|
||||
echo "> No present configuration on current config.js file"
|
||||
sed -i "/$CONFIG_MATCH1/i \\\n" "$MEET_CONF"
|
||||
sed -i "/$CONFIG_MATCH1/i \ \ \ \ whiteboard: {" "$MEET_CONF"
|
||||
sed -i "/$CONFIG_MATCH1/i \ \ \ \ \ \ \ \ enabled: true," "$MEET_CONF"
|
||||
sed -i "/$CONFIG_MATCH1/i \ \ \ \ \ \ \ \ collabServerBaseUrl: 'https://$DOMAIN'" "$MEET_CONF"
|
||||
sed -i "/$CONFIG_MATCH1/i \ \ \ \ }," "$MEET_CONF"
|
||||
sed -i "/$CONFIG_MATCH1/i \\\n" "$MEET_CONF"
|
||||
else
|
||||
echo "> Enabling configuration on current config.js file"
|
||||
sed -i "/whiteboard: {/,/},/s|// ||" "$MEET_CONF"
|
||||
sed -i "/collabServerBaseUrl:/s|'https://.*'|'https://$DOMAIN'|" "$MEET_CONF"
|
||||
fi
|
||||
|
||||
if sed -n '/toolbarButtons: \[/,/\],/p' "$MEET_CONF" | \
|
||||
grep -v '//'| grep -q whiteboard ; then
|
||||
echo "> Whiteboard toolbar already enabled."
|
||||
elif sed -n '/toolbarButtons: \[/,/\],/p' "$MEET_CONF" | \
|
||||
grep -v '//'|grep -q toolbarButtons: ; then
|
||||
echo "> Enabling whiteboard toolbar."
|
||||
sed -i "/toolbarButtons:/a \ \ \ \ \ \ \ 'whiteboard'," "$MEET_CONF"
|
||||
else
|
||||
echo "> ToolbarButtons not customized, whiteboard should be enabled by default,"
|
||||
echo " otherwise, please report to: https://forge.switnet.net/switnet/quick-jibri-installer/issues"
|
||||
fi
|
||||
|
||||
printf "\n# Add systemd service\n"
|
||||
cat << EOF > /etc/systemd/system/excalidraw.service
|
||||
[Unit]
|
||||
Description=Excalidraw backend
|
||||
After=network-online.target
|
||||
|
||||
[Service]
|
||||
User=excalidraw
|
||||
Group=excalidraw
|
||||
WorkingDirectory=$EXCALIDRAW_HOME/backend
|
||||
ExecStart=npm start
|
||||
Restart=always
|
||||
RestartSec=5s
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
systemctl enable excalidraw.service
|
||||
systemctl start excalidraw.service
|
||||
|
||||
printwc "${Green}" "\nExcalidraw setup complete!\n"
|
||||
restart_services
|
|
@ -0,0 +1,177 @@
|
|||
# Nextcloud 28 nginx - configuration
|
||||
upstream php-handler {
|
||||
#server 127.0.0.1:9000;
|
||||
server unix:/run/php/php_PHPVER-fpm.sock;
|
||||
}
|
||||
|
||||
# Set the `immutable` cache control options only for assets with a cache busting `v` argument
|
||||
map $arg_v $asset_immutable {
|
||||
"" "";
|
||||
default "immutable";
|
||||
}
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
listen [::]:80;
|
||||
server_name _NC_DOMAIN;
|
||||
# enforce https
|
||||
return 301 https://\$server_name\$request_uri;
|
||||
}
|
||||
|
||||
server {
|
||||
listen _NC_NGINX_SSL_PORT ssl http2;
|
||||
listen [::]:_NC_NGINX_SSL_PORT ssl http2;
|
||||
server_name _NC_DOMAIN;
|
||||
|
||||
# Path to the root of your installation
|
||||
root _NC_PATH/;
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/_NC_DOMAIN/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/_NC_DOMAIN/privkey.pem;
|
||||
|
||||
# Prevent nginx HTTP Server Detection
|
||||
server_tokens off;
|
||||
|
||||
# HSTS settings
|
||||
# WARNING: Only add the preload option once you read about
|
||||
# the consequences in https://hstspreload.org/. This option
|
||||
# will add the domain to a hardcoded list that is shipped
|
||||
# in all major browsers and getting removed from this list
|
||||
# could take several months.
|
||||
#add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
|
||||
|
||||
# set max upload size and increase upload timeout:
|
||||
client_max_body_size 512M;
|
||||
client_body_timeout 300s;
|
||||
fastcgi_buffers 64 4K;
|
||||
|
||||
# Enable gzip but do not remove ETag headers
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_comp_level 4;
|
||||
gzip_min_length 256;
|
||||
gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
|
||||
gzip_types application/atom+xml text/javascript application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/wasm application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
|
||||
|
||||
# Pagespeed is not supported by Nextcloud, so if your server is built
|
||||
# with the `ngx_pagespeed` module, uncomment this line to disable it.
|
||||
#pagespeed off;
|
||||
|
||||
# The settings allows you to optimize the HTTP2 bandwidth.
|
||||
# See https://blog.cloudflare.com/delivering-http-2-upload-speed-improvements/
|
||||
# for tuning hints
|
||||
client_body_buffer_size 512k;
|
||||
|
||||
# HTTP response headers borrowed from Nextcloud `.htaccess`
|
||||
add_header Referrer-Policy "no-referrer" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-Permitted-Cross-Domain-Policies "none" always;
|
||||
add_header X-Robots-Tag "noindex, nofollow" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
|
||||
# Remove X-Powered-By, which is an information leak
|
||||
fastcgi_hide_header X-Powered-By;
|
||||
|
||||
# Specify how to handle directories -- specifying `/index.php$request_uri`
|
||||
# here as the fallback means that Nginx always exhibits the desired behaviour
|
||||
# when a client requests a path that corresponds to a directory that exists
|
||||
# on the server. In particular, if that directory contains an index.php file,
|
||||
# that file is correctly served; if it doesn't, then the request is passed to
|
||||
# the front-end controller. This consistent behaviour means that we don't need
|
||||
# to specify custom rules for certain paths (e.g. images and other assets,
|
||||
# `/updater`, `/ocs-provider`), and thus
|
||||
# `try_files $uri $uri/ /index.php$request_uri`
|
||||
# always provides the desired behaviour.
|
||||
index index.php index.html /index.php$request_uri;
|
||||
|
||||
# Rule borrowed from `.htaccess` to handle Microsoft DAV clients
|
||||
location = / {
|
||||
if ( $http_user_agent ~ ^DavClnt ) {
|
||||
return 302 /remote.php/webdav/$is_args$args;
|
||||
}
|
||||
}
|
||||
|
||||
location = /robots.txt {
|
||||
allow all;
|
||||
log_not_found off;
|
||||
access_log off;
|
||||
}
|
||||
|
||||
# Make a regex exception for `/.well-known` so that clients can still
|
||||
# access it despite the existence of the regex rule
|
||||
# `location ~ /(\.|autotest|...)` which would otherwise handle requests
|
||||
# for `/.well-known`.
|
||||
location ^~ /.well-known {
|
||||
# The rules in this block are an adaptation of the rules
|
||||
# in `.htaccess` that concern `/.well-known`.
|
||||
|
||||
location = /.well-known/carddav { return 301 /remote.php/dav/; }
|
||||
location = /.well-known/caldav { return 301 /remote.php/dav/; }
|
||||
|
||||
location /.well-known/acme-challenge { try_files $uri $uri/ =404; }
|
||||
location /.well-known/pki-validation { try_files $uri $uri/ =404; }
|
||||
|
||||
# Let Nextcloud's API for `/.well-known` URIs handle all other
|
||||
# requests by passing them to the front-end controller.
|
||||
return 301 /index.php$request_uri;
|
||||
}
|
||||
|
||||
# Rules borrowed from `.htaccess` to hide certain paths from clients
|
||||
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/) { return 404; }
|
||||
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) { return 404; }
|
||||
|
||||
# Ensure this block, which passes PHP files to the PHP process, is above the blocks
|
||||
# which handle static assets (as seen below). If this block is not declared first,
|
||||
# then Nginx will encounter an infinite rewriting loop when it prepends `/index.php`
|
||||
# to the URI, resulting in a HTTP 500 error response.
|
||||
location ~ \.php(?:$|/) {
|
||||
# Required for legacy support
|
||||
rewrite ^/(?!index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|ocs-provider\/.+|.+\/richdocumentscode\/proxy) /index.php$request_uri;
|
||||
|
||||
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
|
||||
set $path_info $fastcgi_path_info;
|
||||
|
||||
try_files $fastcgi_script_name =404;
|
||||
|
||||
include fastcgi_params;
|
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||
fastcgi_param PATH_INFO $path_info;
|
||||
fastcgi_param HTTPS on;
|
||||
|
||||
fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice
|
||||
fastcgi_param front_controller_active true; # Enable pretty urls
|
||||
fastcgi_pass php-handler;
|
||||
|
||||
fastcgi_intercept_errors on;
|
||||
fastcgi_request_buffering off;
|
||||
|
||||
fastcgi_max_temp_file_size 0;
|
||||
}
|
||||
|
||||
# Serve static files
|
||||
location ~ \.(?:css|js|mjs|svg|gif|png|jpg|ico|wasm|tflite|map|ogg|flac)$ {
|
||||
try_files $uri /index.php$request_uri;
|
||||
add_header Cache-Control "public, max-age=15778463, $asset_immutable";
|
||||
access_log off; # Optional: Don't log access to assets
|
||||
|
||||
location ~ \.wasm$ {
|
||||
default_type application/wasm;
|
||||
}
|
||||
}
|
||||
|
||||
location ~ \.woff2?$ {
|
||||
try_files $uri /index.php$request_uri;
|
||||
expires 7d; # Cache-Control policy borrowed from `.htaccess`
|
||||
access_log off; # Optional: Don't log access to assets
|
||||
}
|
||||
|
||||
# Rule borrowed from `.htaccess`
|
||||
location /remote {
|
||||
return 301 /remote.php$request_uri;
|
||||
}
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ /index.php$request_uri;
|
||||
}
|
||||
}
|
|
@ -8,7 +8,7 @@
|
|||
# by "mephisto"
|
||||
#
|
||||
# Igor Kerstges © - 2021
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
#
|
||||
# GPLv3 or later.
|
||||
|
||||
|
@ -167,7 +167,7 @@ if [ -f "$WS_CONF" ]; then
|
|||
systemctl restart nginx
|
||||
else
|
||||
echo "No app configuration done to server file, please report to:
|
||||
-> https://github.com/switnet-ltd/quick-jibri-installer/issues"
|
||||
-> https://forge.switnet.net/switnet/quick-jibri-installer/issues"
|
||||
fi
|
||||
|
||||
echo "
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
#!/bin/bash
|
||||
# Jitsi Meet recurring upgrader and customization keeper
|
||||
# for Debian/*buntu binaries.
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GNU GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
@ -40,7 +40,12 @@ fi
|
|||
support="https://switnet.net/support"
|
||||
apt_repo="/etc/apt/sources.list.d"
|
||||
ENABLE_BLESSM="TBD"
|
||||
CHD_LTST="$(curl -sL https://chromedriver.storage.googleapis.com/LATEST_RELEASE)"
|
||||
G_CHROME=$(apt-cache madison google-chrome-stable|awk '{print$3}'|cut -d. -f1-3)
|
||||
CHROMELAB_URL="https://googlechromelabs.github.io/chrome-for-testing"
|
||||
CHD_LTST_DWNL=$(curl -s $CHROMELAB_URL/known-good-versions-with-downloads.json | \
|
||||
jq -r ".versions[].downloads.chromedriver | select(. != null) | .[].url" | \
|
||||
grep linux64 | grep "$G_CHROME" | tail -1)
|
||||
CHD_LTST=$(awk -F '/' '{print$7}' <<< "$CHD_LTST_DWNL")
|
||||
CHD_LTST_2D="$(cut -d "." -f 1,2 <<< "$CHD_LTST")"
|
||||
CHDB="$(whereis chromedriver | awk '{print$2}')"
|
||||
if [ -d /etc/prosody/conf.d/ ]; then
|
||||
|
@ -66,12 +71,6 @@ read -r -a google_package < <(grep ^Package /var/lib/apt/lists/dl.google.com_*_P
|
|||
else
|
||||
echo "Seems no Google repo installed"
|
||||
fi
|
||||
if [ -z "$CHDB" ]; then
|
||||
echo "Seems no chromedriver installed"
|
||||
else
|
||||
CHD_VER_LOCAL="$($CHDB -v | awk '{print $2}')"
|
||||
CHD_VER_2D="$(awk '{printf "%.1f\n", $NF}' <<< "$CHD_VER_LOCAL")"
|
||||
fi
|
||||
if [ -f "$apt_repo"/nodesource.list ]; then
|
||||
read -r -a nodejs_package < <(grep ^Package /var/lib/apt/lists/deb.nodesource.com_node*_Packages | \
|
||||
sort -u | awk '{print $2}' | xargs)
|
||||
|
@ -114,12 +113,19 @@ update_google_repo() {
|
|||
else
|
||||
echo "No Google repository found"
|
||||
fi
|
||||
if [ -z "$CHDB" ]; then
|
||||
echo "Seems no chromedriver installed"
|
||||
else
|
||||
CHD_VER_LOCAL="$($CHDB -v | awk '{print $2}')"
|
||||
CHD_VER_2D="$(awk '{printf "%.1f\n", $NF}' <<< "$CHD_VER_LOCAL")"
|
||||
fi
|
||||
}
|
||||
update_nodejs_repo() {
|
||||
apt-get update -o Dir::Etc::sourcelist="sources.list.d/nodesource.list" \
|
||||
-o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0"
|
||||
apt-get install -q2 --only-upgrade <<< printf "${nodejs_package[@]}"
|
||||
}
|
||||
check_latest_gc() {
|
||||
printwc "${Purple}" "Checking for Google Chrome\n"
|
||||
if [ -f /usr/bin/google-chrome ]; then
|
||||
GOOGL_VER_2D="$(/usr/bin/google-chrome --version|awk '{printf "%.1f\n", $NF}')"
|
||||
|
@ -127,13 +133,17 @@ else
|
|||
printwc "${Yellow}" " -> Seems there is no Google Chrome installed\n"
|
||||
IS_GLG_CHRM="no"
|
||||
fi
|
||||
}
|
||||
check_latest_gc
|
||||
upgrade_cd() {
|
||||
if [ -n "$GOOGL_VER_2D" ]; then
|
||||
check_latest_gc
|
||||
if version_gt "$GOOGL_VER_2D" "$CHD_VER_2D" ; then
|
||||
echo "Upgrading Chromedriver to Google Chromes version"
|
||||
wget -q https://chromedriver.storage.googleapis.com/"$CHD_LTST"/chromedriver_linux64.zip \
|
||||
wget -q "$CHD_LTST_DWNL" \
|
||||
-O /tmp/chromedriver_linux64.zip
|
||||
unzip -o /tmp/chromedriver_linux64.zip -d /usr/local/bin/
|
||||
mv /usr/local/bin/chromedriver-linux64/chromedriver "$CHDB"
|
||||
chown root:root "$CHDB"
|
||||
chmod 0755 "$CHDB"
|
||||
rm -rf /tpm/chromedriver_linux64.zip
|
||||
|
@ -255,6 +265,10 @@ printwc "${Purple}" "========== Enable $NC_DOMAIN for sync client ==========\n"
|
|||
echo "$NC_DOMAIN seems to be on place, skipping..."
|
||||
fi
|
||||
fi
|
||||
|
||||
# Final check & upgrade call.
|
||||
check_lst_cd
|
||||
|
||||
if [ "$JIBRI_NODE" = "yes" ]; then
|
||||
restart_jibri
|
||||
else
|
||||
|
|
2
jm-bm.sh
2
jm-bm.sh
|
@ -1,7 +1,7 @@
|
|||
#!/bin/bash
|
||||
# Jitsi Meet brandless mode
|
||||
# for Debian/*buntu binaries.
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GNU GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
|
361
jra_nextcloud.sh
361
jra_nextcloud.sh
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# JRA (Jibri Recordings Access) via Nextcloud
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
@ -14,7 +14,7 @@ done
|
|||
|
||||
#DEBUG
|
||||
if [ "$MODE" = "debug" ]; then
|
||||
set -x
|
||||
set -x
|
||||
fi
|
||||
|
||||
if ! [ "$(id -u)" = 0 ]; then
|
||||
|
@ -25,7 +25,7 @@ exit_if_not_installed() {
|
|||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" != "1" ]; then
|
||||
echo " This instance doesn't have $1 installed, exiting..."
|
||||
echo " If you think this is an error, please report to:
|
||||
-> https://github.com/switnet-ltd/quick-jibri-installer/issues "
|
||||
-> https://forge.switnet.net/switnet/quick-jibri-installer/issues "
|
||||
exit
|
||||
fi
|
||||
}
|
||||
|
@ -37,16 +37,16 @@ echo -e '\n
|
|||
by Software, IT & Networks Ltd
|
||||
\n'
|
||||
exit_if_not_installed jitsi-meet
|
||||
## APT checks
|
||||
apt-get update -q2
|
||||
# Manually add prerequisites.
|
||||
apt-get install -y curl letsencrypt nginx
|
||||
|
||||
DISTRO_RELEASE="$(lsb_release -sc)"
|
||||
MIN_PHP="8.2"
|
||||
DOMAIN="$(find /etc/prosody/conf.d/ -name \*.lua|awk -F'.cfg' '!/localhost/{print $1}'|xargs basename)"
|
||||
PHP_REPO="$(apt-cache policy | awk '/http/&&/php/{print$2}' | awk -F "/" 'NR==1{print$5}')"
|
||||
PHPVER="$(apt-cache madison php|grep -v ppa|awk -F'[:+]' 'NR==1{print $2}')"
|
||||
PSGVER="$(apt-cache madison postgresql|tr -d '[:blank:]'|awk -F'[|+]' 'NR==1{print $2}')"
|
||||
PHP_FPM_DIR="/etc/php/$PHPVER/fpm"
|
||||
PHP_INI="$PHP_FPM_DIR/php.ini"
|
||||
PHP_CONF="/etc/php/$PHPVER/fpm/pool.d/www.conf"
|
||||
NC_NGINX_SSL_PORT="$(grep "listen 44" /etc/nginx/sites-available/"$DOMAIN".conf | awk '{print$2}')"
|
||||
[ -z "$NC_NGINX_SSL_PORT" ] && NC_NGINX_SSL_PORT="443"
|
||||
NC_REPO="https://download.nextcloud.com/server/releases"
|
||||
NCVERSION="$(curl -s -m 900 $NC_REPO/ | sed --silent 's/.*href="nextcloud-\([^"]\+\).zip.asc".*/\1/p' | sort --version-sort | tail -1)"
|
||||
STABLEVERSION="nextcloud-$NCVERSION"
|
||||
|
@ -58,34 +58,28 @@ NC_DB_PASSWD="$(tr -dc "a-zA-Z0-9#_*=" < /dev/urandom | fold -w 14 | head -n1)"
|
|||
DIR_RECORD="$(awk -F '"' '/RECORDING/{print$2}' /home/jibri/finalize_recording.sh|awk 'NR==1{print$1}')"
|
||||
REDIS_CONF="/etc/redis/redis.conf"
|
||||
JITSI_MEET_PROXY="/etc/nginx/modules-enabled/60-jitsi-meet.conf"
|
||||
if [ -f "$JITSI_MEET_PROXY" ];then
|
||||
PREAD_PROXY=$(grep -nr "preread_server_name" "$JITSI_MEET_PROXY" | cut -d ":" -f1)
|
||||
fi
|
||||
[ -f "$JITSI_MEET_PROXY" ] && PREAD_PROXY=$(grep -nr "preread_server_name" "$JITSI_MEET_PROXY" | cut -d ":" -f1)
|
||||
PUBLIC_IP="$(dig +short myip.opendns.com @resolver1.opendns.com)"
|
||||
ISO3166_CODE=TBD
|
||||
NL="$(printf '\n ')"
|
||||
TMP_GPG_REPO="$(mktemp -d)"
|
||||
add_gpg_keyring() {
|
||||
apt-key adv --recv-keys --keyserver keyserver.ubuntu.com "$1"
|
||||
apt-key export "$1" | gpg --dearmour | tee "$TMP_GPG_REPO"/"$1".gpg >/dev/null
|
||||
apt-key del "$1"
|
||||
mv "$TMP_GPG_REPO"/"$1".gpg /etc/apt/trusted.gpg.d/
|
||||
}
|
||||
install_aval_package() {
|
||||
for i in $1
|
||||
do
|
||||
if [ -z "$(apt-cache madison $i 2>/dev/null)" ]; then
|
||||
echo " > Package $i not available on repo."
|
||||
else
|
||||
echo " > Add package $i to the install list"
|
||||
packages="$packages $i"
|
||||
fi
|
||||
done
|
||||
echo "$packages"
|
||||
apt-get -y install $packages
|
||||
packages=""
|
||||
}
|
||||
|
||||
|
||||
exit_ifinstalled() {
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo " This instance already has $1 installed, exiting..."
|
||||
echo " If you think this is an error, please report to:
|
||||
-> https://forge.switnet.net/switnet/quick-jibri-installer/issues "
|
||||
exit
|
||||
fi
|
||||
}
|
||||
install_ifnot() {
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo " $1 is installed, skipping..."
|
||||
else
|
||||
echo -e "\n---- Installing $1 ----"
|
||||
apt-get -yq2 install "$1"
|
||||
fi
|
||||
}
|
||||
while [[ "$ANS_NCD" != "yes" ]]
|
||||
do
|
||||
read -p "> Please set your domain (or subdomain) here for Nextcloud: (e.g.: cloud.domain.com)$NL" -r NC_DOMAIN
|
||||
|
@ -101,9 +95,11 @@ do
|
|||
echo " - Please try again."
|
||||
fi
|
||||
done
|
||||
sleep .1
|
||||
#Simple DNS test
|
||||
if [ "$PUBLIC_IP" = "$(dig -4 +short "$NC_DOMAIN"|awk -v RS='([0-9]+\\.){3}[0-9]+' 'RT{print RT}')" ]; then
|
||||
echo -e "Server public IP & DNS record for $NC_DOMAIN seems to match, continuing...\n\n"
|
||||
sleep .1
|
||||
else
|
||||
echo "Server public IP ($PUBLIC_IP) & DNS record for $NC_DOMAIN don't seem to match."
|
||||
echo " > Please check your dns records are applied and updated, otherwise Nextcloud may fail."
|
||||
|
@ -115,7 +111,7 @@ else
|
|||
exit
|
||||
fi
|
||||
fi
|
||||
|
||||
sleep .1
|
||||
NC_NGINX_CONF="/etc/nginx/sites-available/$NC_DOMAIN.conf"
|
||||
while [ -z "$NC_USER" ]
|
||||
do
|
||||
|
@ -124,13 +120,15 @@ do
|
|||
echo " - This field is mandatory."
|
||||
fi
|
||||
done
|
||||
while [ -z "$NC_PASS" ] || [ ${#NC_PASS} -lt 6 ]
|
||||
sleep .1
|
||||
while [ -z "$NC_PASS" ] || [ ${#NC_PASS} -lt 8 ]
|
||||
do
|
||||
read -p "Nextcloud user password: " -r NC_PASS
|
||||
if [ -z "$NC_PASS" ] || [ ${#NC_PASS} -lt 6 ]; then
|
||||
echo -e " - This field is mandatory. \nPlease make sure it's at least 6 characters.\n"
|
||||
if [ -z "$NC_PASS" ] || [ ${#NC_PASS} -lt 8 ]; then
|
||||
echo -e " - This field is mandatory. \nPlease make sure it's at least 8 characters.\n"
|
||||
fi
|
||||
done
|
||||
sleep .1
|
||||
#Enable HSTS
|
||||
while [ "$ENABLE_HSTS" != "yes" ] && [ "$ENABLE_HSTS" != "no" ]
|
||||
do
|
||||
|
@ -143,7 +141,7 @@ do
|
|||
echo " - HSTS will be enabled."
|
||||
fi
|
||||
done
|
||||
|
||||
sleep .1
|
||||
echo -e "#Default country phone code\n
|
||||
> Starting at Nextcloud 21.x it's required to set a default country phone ISO 3166-1 alpha-2 code.\n
|
||||
>>> https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2#Officially_assigned_code_elements <<<\n"
|
||||
|
@ -169,34 +167,6 @@ else
|
|||
exit
|
||||
fi
|
||||
|
||||
exit_ifinstalled() {
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo " This instance already has $1 installed, exiting..."
|
||||
echo " If you think this is an error, please report to:
|
||||
-> https://github.com/switnet-ltd/quick-jibri-installer/issues "
|
||||
exit
|
||||
fi
|
||||
}
|
||||
install_ifnot() {
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo " $1 is installed, skipping..."
|
||||
else
|
||||
echo -e "\n---- Installing $1 ----"
|
||||
apt-get -yq2 install "$1"
|
||||
fi
|
||||
}
|
||||
add_php() {
|
||||
if [ "$PHP_REPO" = "php" ]; then
|
||||
echo "PHP $PHPVER already installed"
|
||||
apt-get -q2 update
|
||||
apt-get -yq2 dist-upgrade
|
||||
else
|
||||
echo "# Adding Ondrej PHP $PHPVER PPA Repository"
|
||||
add_gpg_keyring E5267A6C
|
||||
echo "deb [arch=amd64] http://ppa.launchpad.net/ondrej/php/ubuntu $DISTRO_RELEASE main" > /etc/apt/sources.list.d/php"$PHPVER".list
|
||||
apt-get update -q2
|
||||
fi
|
||||
}
|
||||
#Prevent root folder permission issues
|
||||
cp "$PWD"/files/jra-nc-app-ef.json /tmp
|
||||
|
||||
|
@ -206,241 +176,39 @@ exit_ifinstalled postgresql-"$PSGVER"
|
|||
# PostgresSQL
|
||||
install_ifnot postgresql-"$PSGVER"
|
||||
|
||||
# PHP 7.4
|
||||
add_php
|
||||
install_aval_package " \
|
||||
imagemagick \
|
||||
php"$PHPVER"-fpm \
|
||||
php"$PHPVER"-bcmath \
|
||||
php"$PHPVER"-bz2 \
|
||||
php"$PHPVER"-curl \
|
||||
php"$PHPVER"-gd \
|
||||
php"$PHPVER"-gmp \
|
||||
php"$PHPVER"-imagick \
|
||||
php"$PHPVER"-intl \
|
||||
php"$PHPVER"-json \
|
||||
php"$PHPVER"-ldap \
|
||||
php"$PHPVER"-mbstring \
|
||||
php"$PHPVER"-pgsql \
|
||||
php"$PHPVER"-redis \
|
||||
php"$PHPVER"-soap \
|
||||
php"$PHPVER"-xml \
|
||||
php"$PHPVER"-xmlrpc \
|
||||
php"$PHPVER"-zip \
|
||||
redis-server \
|
||||
unzip \
|
||||
"
|
||||
|
||||
#System related
|
||||
install_ifnot smbclient
|
||||
sed -i "s|.*env\[HOSTNAME\].*|env\[HOSTNAME\] = \$HOSTNAME|" "$PHP_CONF"
|
||||
sed -i "s|.*env\[PATH\].*|env\[PATH\] = /usr/local/bin:/usr/bin:/bin|" "$PHP_CONF"
|
||||
sed -i "s|.*env\[TMP\].*|env\[TMP\] = /tmp|" "$PHP_CONF"
|
||||
sed -i "s|.*env\[TMPDIR\].*|env\[TMPDIR\] = /tmp|" "$PHP_CONF"
|
||||
sed -i "s|.*env\[TEMP\].*|env\[TEMP\] = /tmp|" "$PHP_CONF"
|
||||
sed -i "s|;clear_env = no|clear_env = no|" "$PHP_CONF"
|
||||
#--------------------------------------------------
|
||||
# Prepare PHP
|
||||
#--------------------------------------------------
|
||||
|
||||
echo "
|
||||
Tunning PHP.ini...
|
||||
"
|
||||
# Change values in php.ini (increase max file size)
|
||||
# max_execution_time
|
||||
sed -i "s|max_execution_time =.*|max_execution_time = 3500|g" "$PHP_INI"
|
||||
# max_input_time
|
||||
sed -i "s|max_input_time =.*|max_input_time = 3600|g" "$PHP_INI"
|
||||
# memory_limit
|
||||
sed -i "s|memory_limit =.*|memory_limit = 512M|g" "$PHP_INI"
|
||||
# post_max
|
||||
sed -i "s|post_max_size =.*|post_max_size = 1025M|g" "$PHP_INI"
|
||||
# upload_max
|
||||
sed -i "s|upload_max_filesize =.*|upload_max_filesize = 1024M|g" "$PHP_INI"
|
||||
|
||||
phpenmod opcache
|
||||
{
|
||||
|
||||
echo "# OPcache settings for Nextcloud"
|
||||
echo "opcache.enable=1"
|
||||
echo "opcache.enable_cli=1"
|
||||
echo "opcache.interned_strings_buffer=8"
|
||||
echo "opcache.max_accelerated_files=10000"
|
||||
echo "opcache.memory_consumption=256"
|
||||
echo "opcache.save_comments=1"
|
||||
echo "opcache.revalidate_freq=1"
|
||||
echo "opcache.validate_timestamps=1"
|
||||
} >> "$PHP_INI"
|
||||
|
||||
systemctl restart php"$PHPVER"-fpm.service
|
||||
if [ "$MODE" = "debug" ]; then
|
||||
bash -x "$PWD"/tools/prepare_php.sh "$MIN_PHP"
|
||||
else
|
||||
bash "$PWD"/tools/prepare_php.sh "$MIN_PHP"
|
||||
fi
|
||||
|
||||
#--------------------------------------------------
|
||||
# Create DB user
|
||||
#--------------------------------------------------
|
||||
|
||||
echo -e "\n---- Creating the PgSQL DB & User ----"
|
||||
cd /tmp || return
|
||||
sudo -u postgres psql <<DB
|
||||
CREATE DATABASE nextcloud_db;
|
||||
CREATE USER ${NC_DB_USER} WITH ENCRYPTED PASSWORD '${NC_DB_PASSWD}';
|
||||
GRANT ALL PRIVILEGES ON DATABASE ${NC_DB} TO ${NC_DB_USER};
|
||||
DB
|
||||
echo "Done!
|
||||
"
|
||||
echo -e "\nDone!\n"
|
||||
|
||||
#nginx - configuration
|
||||
cat << NC_NGINX > "$NC_NGINX_CONF"
|
||||
#nextcloud config
|
||||
upstream php-handler {
|
||||
#server 127.0.0.1:9000;
|
||||
server unix:/run/php/php${PHPVER}-fpm.sock;
|
||||
}
|
||||
# Add .mjs as a file extension for javascript
|
||||
sed -i "/application\/javascript/s|js.*;|js mjs;|" /etc/nginx/mime.types
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
listen [::]:80;
|
||||
server_name $NC_DOMAIN;
|
||||
# enforce https
|
||||
return 301 https://\$server_name\$request_uri;
|
||||
}
|
||||
# nginx conf setup.
|
||||
cp files/nextcloud.conf "$NC_NGINX_CONF"
|
||||
sed -i "s|_PHPVER|$MIN_PHP|g" "$NC_NGINX_CONF"
|
||||
sed -i "s|_NC_DOMAIN|$NC_DOMAIN|g" "$NC_NGINX_CONF"
|
||||
sed -i "s|_NC_NGINX_SSL_PORT|$NC_NGINX_SSL_PORT|g" "$NC_NGINX_CONF"
|
||||
sed -i "s|_NC_PATH|$NC_PATH|g" "$NC_NGINX_CONF"
|
||||
|
||||
server {
|
||||
listen $NC_NGINX_SSL_PORT ssl http2;
|
||||
listen [::]:$NC_NGINX_SSL_PORT ssl http2;
|
||||
server_name $NC_DOMAIN;
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/$NC_DOMAIN/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/$NC_DOMAIN/privkey.pem;
|
||||
|
||||
# HSTS settings
|
||||
# WARNING: Only add the preload option once you read about
|
||||
# the consequences in https://hstspreload.org/. This option
|
||||
# will add the domain to a hardcoded list that is shipped
|
||||
# in all major browsers and getting removed from this list
|
||||
# could take several months.
|
||||
#add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;
|
||||
|
||||
# Enable gzip but do not remove ETag headers
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_comp_level 4;
|
||||
gzip_min_length 256;
|
||||
gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
|
||||
gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
|
||||
|
||||
# Pagespeed is not supported by Nextcloud, so if your server is built
|
||||
# with the \`ngx_pagespeed\` module, uncomment this line to disable it.
|
||||
#pagespeed off;
|
||||
|
||||
# HTTP response headers borrowed from Nextcloud \`.htaccess\`
|
||||
add_header Referrer-Policy "no-referrer" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
add_header X-Download-Options "noopen" always;
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-Permitted-Cross-Domain-Policies "none" always;
|
||||
add_header X-Robots-Tag "none" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
|
||||
# Remove X-Powered-By, which is an information leak
|
||||
fastcgi_hide_header X-Powered-By;
|
||||
|
||||
# set max upload size
|
||||
client_max_body_size 1024M;
|
||||
fastcgi_buffers 64 4K;
|
||||
|
||||
# Path to the root of your installation
|
||||
root $NC_PATH/;
|
||||
|
||||
# Specify how to handle directories -- specifying \`/index.php\$request_uri\`
|
||||
# here as the fallback means that Nginx always exhibits the desired behaviour
|
||||
# when a client requests a path that corresponds to a directory that exists
|
||||
# on the server. In particular, if that directory contains an index.php file,
|
||||
# that file is correctly served; if it doesn't, then the request is passed to
|
||||
# the front-end controller. This consistent behaviour means that we don't need
|
||||
# to specify custom rules for certain paths (e.g. images and other assets,
|
||||
# \`/updater\`, \`/ocm-provider\`, \`/ocs-provider\`), and thus
|
||||
# \`try_files \$uri \$uri/ /index.php\$request_uri\`
|
||||
# always provides the desired behaviour.
|
||||
index index.php index.html /index.php\$request_uri;
|
||||
|
||||
# Rule borrowed from \`.htaccess\` to handle Microsoft DAV clients
|
||||
location = / {
|
||||
if ( \$http_user_agent ~ ^DavClnt ) {
|
||||
return 302 /remote.php/webdav/\$is_args\$args;
|
||||
}
|
||||
}
|
||||
|
||||
location = /robots.txt {
|
||||
allow all;
|
||||
log_not_found off;
|
||||
access_log off;
|
||||
}
|
||||
|
||||
# Make a regex exception for \`/.well-known\` so that clients can still
|
||||
# access it despite the existence of the regex rule
|
||||
# \`location ~ /(\.|autotest|...)\` which would otherwise handle requests
|
||||
# for \`/.well-known\`.
|
||||
location ^~ /.well-known {
|
||||
# The rules in this block are an adaptation of the rules
|
||||
# in \`.htaccess\` that concern \`/.well-known\`.
|
||||
|
||||
location = /.well-known/carddav { return 301 /remote.php/dav/; }
|
||||
location = /.well-known/caldav { return 301 /remote.php/dav/; }
|
||||
|
||||
location /.well-known/acme-challenge { try_files \$uri \$uri/ =404; }
|
||||
location /.well-known/pki-validation { try_files \$uri \$uri/ =404; }
|
||||
|
||||
# Let Nextcloud's API for \`/.well-known\` URIs handle all other
|
||||
# requests by passing them to the front-end controller.
|
||||
return 301 /index.php\$request_uri;
|
||||
}
|
||||
|
||||
# Rules borrowed from \`.htaccess\` to hide certain paths from clients
|
||||
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:\$|/) { return 404; }
|
||||
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) { return 404; }
|
||||
|
||||
# Ensure this block, which passes PHP files to the PHP process, is above the blocks
|
||||
# which handle static assets (as seen below). If this block is not declared first,
|
||||
# then Nginx will encounter an infinite rewriting loop when it prepends \`/index.php\`
|
||||
# to the URI, resulting in a HTTP 500 error response.
|
||||
location ~ \.php(?:\$|/) {
|
||||
fastcgi_split_path_info ^(.+?\.php)(/.*)\$;
|
||||
set \$path_info \$fastcgi_path_info;
|
||||
|
||||
try_files \$fastcgi_script_name =404;
|
||||
|
||||
include fastcgi_params;
|
||||
fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
|
||||
fastcgi_param PATH_INFO \$path_info;
|
||||
fastcgi_param HTTPS on;
|
||||
|
||||
fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice
|
||||
fastcgi_param front_controller_active true; # Enable pretty urls
|
||||
fastcgi_pass php-handler;
|
||||
|
||||
fastcgi_intercept_errors on;
|
||||
fastcgi_request_buffering off;
|
||||
}
|
||||
|
||||
location ~ \.(?:css|js|svg|gif)\$ {
|
||||
try_files \$uri /index.php\$request_uri;
|
||||
expires 6M; # Cache-Control policy borrowed from \`.htaccess\`
|
||||
access_log off; # Optional: Don't log access to assets
|
||||
}
|
||||
|
||||
location ~ \.woff2?\$ {
|
||||
try_files \$uri /index.php\$request_uri;
|
||||
expires 7d; # Cache-Control policy borrowed from \`.htaccess\`
|
||||
access_log off; # Optional: Don't log access to assets
|
||||
}
|
||||
|
||||
# Rule borrowed from \`.htaccess\`
|
||||
location /remote {
|
||||
return 301 /remote.php\$request_uri;
|
||||
}
|
||||
|
||||
location / {
|
||||
try_files \$uri \$uri/ /index.php\$request_uri;
|
||||
}
|
||||
}
|
||||
NC_NGINX
|
||||
systemctl stop nginx
|
||||
letsencrypt certonly --standalone --renew-by-default --agree-tos -d "$NC_DOMAIN"
|
||||
if [ -f /etc/letsencrypt/live/"$NC_DOMAIN"/fullchain.pem ];then
|
||||
|
@ -476,7 +244,7 @@ chown -R www-data:www-data "$NC_PATH"
|
|||
chmod -R 755 "$NC_PATH"
|
||||
|
||||
echo -e "\nDatabase installation...\n"
|
||||
sudo -u www-data php "$NC_PATH"/occ maintenance:install \
|
||||
sudo -u www-data php$MIN_PHP "$NC_PATH"/occ maintenance:install \
|
||||
--database=pgsql \
|
||||
--database-name="$NC_DB" \
|
||||
--database-user="$NC_DB_USER" \
|
||||
|
@ -488,10 +256,10 @@ echo -e "\nApply custom mods...\n"
|
|||
sed -i "/datadirectory/a \ \ \'skeletondirectory\' => \'\'," "$NC_CONFIG"
|
||||
sed -i "/skeletondirectory/a \ \ \'simpleSignUpLink.shown\' => false," "$NC_CONFIG"
|
||||
sed -i "/simpleSignUpLink.shown/a \ \ \'knowledgebaseenabled\' => false," "$NC_CONFIG"
|
||||
sed -i "s|http://localhost|http://$NC_DOMAIN|" "$NC_CONFIG"
|
||||
sed -i "s|http://localhost|https://$NC_DOMAIN|" "$NC_CONFIG"
|
||||
|
||||
echo -e "\nAdd crontab...\n"
|
||||
crontab -u www-data -l | { cat; echo "*/5 * * * * php -f $NC_PATH/cron.php"; } | crontab -u www-data -
|
||||
crontab -u www-data -l | { cat; echo "*/5 * * * * php$MIN_PHP -f $NC_PATH/cron.php"; } | crontab -u www-data -
|
||||
|
||||
echo -e "\nAdd memcache support...\n"
|
||||
sed -i "s|# unixsocket .*|unixsocket /var/run/redis/redis.sock|g" "$REDIS_CONF"
|
||||
|
@ -517,25 +285,24 @@ sed -i "/);/i \ \ )," "$NC_CONFIG"
|
|||
echo -e "Done\n"
|
||||
|
||||
echo -e "\nAddding & Setting up Files External App for Local storage...\n"
|
||||
sudo -u www-data php "$NC_PATH"/occ app:install files_external
|
||||
sudo -u www-data php "$NC_PATH"/occ app:enable files_external
|
||||
sudo -u www-data php "$NC_PATH"/occ app:disable support
|
||||
sudo -u www-data php "$NC_PATH"/occ files_external:import /tmp/jra-nc-app-ef.json
|
||||
sudo -u www-data php$MIN_PHP "$NC_PATH"/occ app:install files_external
|
||||
sudo -u www-data php$MIN_PHP "$NC_PATH"/occ app:enable files_external
|
||||
sudo -u www-data php$MIN_PHP "$NC_PATH"/occ app:disable support
|
||||
sudo -u www-data php$MIN_PHP "$NC_PATH"/occ files_external:import /tmp/jra-nc-app-ef.json
|
||||
|
||||
usermod -a -G jibri www-data
|
||||
chmod -R 770 "$DIR_RECORD"
|
||||
chmod -R g+s "$DIR_RECORD"
|
||||
|
||||
echo -e "\nFixing possible missing tables...\n\n"
|
||||
echo "y"|sudo -u www-data php "$NC_PATH"/occ db:convert-filecache-bigint
|
||||
sudo -u www-data php "$NC_PATH"/occ db:add-missing-indices
|
||||
sudo -u www-data php "$NC_PATH"/occ db:add-missing-columns
|
||||
echo "y"|sudo -u www-data php$MIN_PHP "$NC_PATH"/occ db:convert-filecache-bigint
|
||||
sudo -u www-data php$MIN_PHP "$NC_PATH"/occ db:add-missing-indices
|
||||
sudo -u www-data php$MIN_PHP "$NC_PATH"/occ db:add-missing-columns
|
||||
|
||||
echo -e "\nAdding trusted domain...\n"
|
||||
sudo -u www-data php "$NC_PATH"/occ config:system:set trusted_domains 0 --value="$NC_DOMAIN"
|
||||
sudo -u www-data php$MIN_PHP "$NC_PATH"/occ config:system:set trusted_domains 0 --value="$NC_DOMAIN"
|
||||
|
||||
echo -e "\nSetting JRA domain on jitsi-updater.sh\n"
|
||||
cd ~/quick-jibri-installer || return
|
||||
sed -i "s|NC_DOMAIN=.*|NC_DOMAIN=\"$NC_DOMAIN\"|" jitsi-updater.sh
|
||||
|
||||
echo -e "\nQuick Nextcloud installation complete!\n"
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# Custom High Performance Jitsi conf
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
@ -87,7 +87,7 @@ Overview:
|
|||
echo "# Note: As for January 2021 Firefox can't handle correctly widescreen sizing
|
||||
# on lower resolution than HD (nHD & qHD), setting as incompatible for now.
|
||||
# (If you know this is no longer the case. Please report it to \
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues)
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues)
|
||||
"
|
||||
|
||||
#Tools to consider
|
||||
|
@ -310,7 +310,7 @@ else
|
|||
echo -e "\n Watch out!, there seems to be an issue on $MEET_CONF_HP line:
|
||||
$CHECKJS_MEET_CHP
|
||||
Most of the times this is due upstream changes, please report to
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
fi
|
||||
CHECKJS_INT_CHP="$(esvalidate "$INT_CONF_JS_HP"| cut -d ":" -f2)"
|
||||
if [ -z "$CHECKJS_INT_CHP" ]; then
|
||||
|
@ -319,7 +319,7 @@ else
|
|||
echo -e "\n Watch out!, there seems to be an issue on $INT_CONF_JS_HP line:
|
||||
$CHECKJS_INT_CHP
|
||||
Most of the times this is due upstream changes, please report to
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
fi
|
||||
|
||||
sed -i "s|$MEET_CONF|$MEET_CONF_HP|g" "$WS_CONF"
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
#!/bin/bash
|
||||
# Custom Selenium Grid-Node fro Jitsi Meet
|
||||
# Pandian © - https://community.jitsi.org/u/Pandian
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
|
|
@ -2,7 +2,7 @@
|
|||
# System-tune-up to remove system software restrictions on a huge load of connections.
|
||||
# Be aware that hardware/infrastructure resources are the most common limiters.
|
||||
#
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# JWT Mode Setup
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# Quick Jibri Installer - *buntu (LTS) based systems.
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
{
|
||||
echo "Started at $(date +'%Y-%m-%d %H:%M:%S')" >> qj-installer.log
|
||||
|
@ -16,9 +16,20 @@ done
|
|||
|
||||
#DEBUG
|
||||
if [ "$MODE" = "debug" ]; then
|
||||
set -x
|
||||
set -x
|
||||
fi
|
||||
|
||||
# Reset
|
||||
Color_Off='\e[0m' # Text Reset
|
||||
# Regular Colors
|
||||
Black='\e[0;30m' # Black
|
||||
Red='\e[0;31m' # Red
|
||||
Green='\e[0;32m' # Green
|
||||
Yellow='\e[0;33m' # Yellow
|
||||
Blue='\e[0;34m' # Blue
|
||||
Purple='\e[0;35m' # Purple
|
||||
Cyan='\e[0;36m' # Cyan
|
||||
|
||||
# SYSTEM SETUP
|
||||
JITSI_REPO=$(apt-cache policy | awk '/jitsi/&&/stable/{print$3}' | awk -F / 'NR==1{print$1}')
|
||||
APACHE_2=$(dpkg-query -W -f='${Status}' apache2 2>/dev/null | grep -c "ok installed")
|
||||
|
@ -27,104 +38,129 @@ DIST=$(lsb_release -sc)
|
|||
GOOGL_REPO="/etc/apt/sources.list.d/dl_google_com_linux_chrome_deb.list"
|
||||
GOOGLE_ACTIVE_REPO=$(apt-cache policy | awk '/chrome/{print$3}' | awk -F "/" 'NR==1{print$2}')
|
||||
PROSODY_REPO="$(apt-cache policy | awk '/prosody/{print$3}' | awk -F "/" 'NR==1{print$2}')"
|
||||
PUBLIC_IP="$(dig +short myip.opendns.com @resolver1.opendns.com)"
|
||||
PUBLIC_IP="$(dig -4 +short myip.opendns.com @resolver1.opendns.com)"
|
||||
NL="$(printf '\n ')"
|
||||
NODEJS_VER="18"
|
||||
JITSI_GPG_KEY="/etc/apt/trusted.gpg.d/jitsi-key.gpg.key"
|
||||
PROSODY_GPG_KEY="/etc/apt/trusted.gpg.d/prosody-debian-packages.key"
|
||||
NODEJS_GPG_KEY="/etc/apt/keyrings/nodesource.gpg"
|
||||
TODAY=$(date +%s)
|
||||
NEXT_LTS_DATE=$(date -d 2024-04-01 +%s)
|
||||
CERT_CHOICE_DEBCONF="Generate a new self-signed certificate (You will later get a chance to obtain a Let's encrypt certificate)"
|
||||
|
||||
printwc() {
|
||||
printf "%b$2%b" "$1" "${Color_Off}"
|
||||
}
|
||||
exit_ifinstalled() {
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo "
|
||||
This instance already has $1 installed, exiting...
|
||||
Please try again on a clean system.
|
||||
If you think this is an error, please report to:
|
||||
-> https://github.com/switnet-ltd/quick-jibri-installer/issues"
|
||||
exit
|
||||
fi
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo -e "\nThis instance already has $1 installed, exiting..."
|
||||
echo -e "Please try again on a clean system."
|
||||
echo -e " If you think this is an error, please report to:"
|
||||
echo -e " -> https://forge.switnet.net/switnet/quick-jibri-installer/issues"
|
||||
exit
|
||||
fi
|
||||
}
|
||||
exit_ifinstalled jitsi-meet
|
||||
|
||||
rename_distro() {
|
||||
if [ "$DIST" = "$1" ]; then
|
||||
DIST="$2"
|
||||
fi
|
||||
if [ "$DIST" = "$1" ]; then
|
||||
DIST="$2"
|
||||
fi
|
||||
}
|
||||
#Trisquel distro renaming
|
||||
rename_distro flidas xenial
|
||||
rename_distro etiona bionic
|
||||
#Trisquel distro upstream referencing.
|
||||
rename_distro nabia focal
|
||||
rename_distro aramo jammy
|
||||
|
||||
install_ifnot() {
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo " $1 is installed, skipping..."
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo " $1 is installed, skipping..."
|
||||
else
|
||||
printf "\n---- Installing %s ----" "$1"
|
||||
apt-get -yq2 install "$1"
|
||||
fi
|
||||
fi
|
||||
}
|
||||
check_serv() {
|
||||
if [ "$APACHE_2" -eq 1 ]; then
|
||||
echo "
|
||||
The recommended setup is using NGINX, exiting...
|
||||
"
|
||||
exit
|
||||
elif [ "$NGINX" -eq 1 ]; then
|
||||
|
||||
printf "\nWebserver already installed!\n"
|
||||
|
||||
else
|
||||
printf "\nInstalling nginx webserver!\n"
|
||||
install_ifnot nginx
|
||||
fi
|
||||
if [ "$APACHE_2" -eq 1 ]; then
|
||||
echo -e "\nThe recommended setup is using NGINX, exiting...\n"
|
||||
exit
|
||||
elif [ "$NGINX" -eq 1 ]; then
|
||||
printf "\nWebserver already installed!\n"
|
||||
else
|
||||
printf "\nInstalling nginx webserver!\n"
|
||||
install_ifnot nginx
|
||||
fi
|
||||
}
|
||||
check_snd_driver() {
|
||||
printf "\n# Checking ALSA - Loopback module..."
|
||||
echo "snd-aloop" | tee -a /etc/modules
|
||||
modprobe snd-aloop
|
||||
if [ "$(lsmod|awk '/snd_aloop/{print$1}'|awk 'NR==1')" = "snd_aloop" ]; then
|
||||
echo "
|
||||
#-----------------------------------------------------------------------
|
||||
# Audio driver seems - OK.
|
||||
#-----------------------------------------------------------------------"
|
||||
else
|
||||
echo "
|
||||
#-----------------------------------------------------------------------
|
||||
# Your audio driver might not be able to load.
|
||||
# We'll check the state of this Jibri with our 'test-jibri-env.sh' tool.
|
||||
#-----------------------------------------------------------------------"
|
||||
#Test tool
|
||||
if [ "$MODE" = "debug" ]; then
|
||||
bash "$PWD"/tools/test-jibri-env.sh -m debug
|
||||
else
|
||||
bash "$PWD"/tools/test-jibri-env.sh
|
||||
fi
|
||||
read -n 1 -s -r -p "Press any key to continue..."$'\n'
|
||||
fi
|
||||
printf "\n# Checking ALSA - Loopback module..."
|
||||
echo "snd-aloop" | tee -a /etc/modules
|
||||
modprobe snd-aloop
|
||||
if [ "$(lsmod|awk '/snd_aloop/{print$1}'|awk 'NR==1')" = "snd_aloop" ]; then
|
||||
echo -e "\n#-----------------------------------------------------------------------"
|
||||
echo "# Audio driver seems - OK."
|
||||
echo -e "#-----------------------------------------------------------------------\n"
|
||||
else
|
||||
echo -e "\n#-----------------------------------------------------------------------"
|
||||
echo "# Your audio driver might not be able to load."
|
||||
echo "# We'll check the state of this Jibri with our 'test-jibri-env.sh' tool."
|
||||
echo -e "#-----------------------------------------------------------------------\n"
|
||||
#Test tool
|
||||
if [ "$MODE" = "debug" ]; then
|
||||
bash "$PWD"/tools/test-jibri-env.sh -m debug
|
||||
else
|
||||
bash "$PWD"/tools/test-jibri-env.sh
|
||||
fi
|
||||
read -n 1 -s -r -p "Press any key to continue..."$'\n'
|
||||
fi
|
||||
}
|
||||
# sed limiters for add-jibri-node.sh variables
|
||||
var_dlim() {
|
||||
grep -n "$1" add-jibri-node.sh|head -n1|cut -d ":" -f1
|
||||
}
|
||||
add_gpg_keyring() {
|
||||
apt-key adv --recv-keys --keyserver keyserver.ubuntu.com \$1
|
||||
apt-key export \$1 | gpg --dearmour | tee /tmp/\$1.gpg >/dev/null
|
||||
apt-key del \$1
|
||||
mv /tmp/\$1.gpg /etc/apt/trusted.gpg.d/
|
||||
}
|
||||
add_prosody_repo() {
|
||||
echo "Add Prosody repo"
|
||||
if [ "$PROSODY_REPO" = "main" ]; then
|
||||
echo "Prosody repository already installed"
|
||||
else
|
||||
echo "deb [signed-by=/etc/apt/trusted.gpg.d/prosody-debian-packages.key] http://packages.prosody.im/debian $(lsb_release -sc) main" > /etc/apt/sources.list.d/prosody.list
|
||||
curl -s https://prosody.im/files/prosody-debian-packages.key > /etc/apt/trusted.gpg.d/prosody-debian-packages.key
|
||||
fi
|
||||
echo "Add Prosody repo"
|
||||
if [ "$PROSODY_REPO" = "main" ]; then
|
||||
echo "Prosody repository already installed"
|
||||
else
|
||||
echo "deb [signed-by=$PROSODY_GPG_KEY] http://packages.prosody.im/debian $DIST main" \
|
||||
> /etc/apt/sources.list.d/prosody.list
|
||||
curl -s https://prosody.im/files/prosody-debian-packages.key \
|
||||
> "$PROSODY_GPG_KEY"
|
||||
apt-get update -q2
|
||||
fi
|
||||
}
|
||||
dpkg-compare() {
|
||||
dpkg --compare-versions "$(dpkg-query -f='${Version}' --show "$1")" "$2" "$3"
|
||||
dpkg --compare-versions "$(dpkg-query -f='${Version}' --show "$1")" "$2" "$3"
|
||||
}
|
||||
wait_seconds() {
|
||||
secs=$(($1))
|
||||
while [ $secs -gt 0 ]; do
|
||||
echo -ne "$secs\033[0K\r"
|
||||
sleep 1
|
||||
: $((secs--))
|
||||
done
|
||||
secs=$(($1))
|
||||
while [ $secs -gt 0 ]; do
|
||||
echo -ne "$secs\033[0K\r"
|
||||
sleep 1
|
||||
: $((secs--))
|
||||
done
|
||||
}
|
||||
print_title() {
|
||||
printwc "${Blue}" "\n#--------------------------------------------------"
|
||||
printwc "${Blue}" "\n# $1"
|
||||
printwc "${Blue}" "\n#--------------------------------------------------\n"
|
||||
}
|
||||
test_match() {
|
||||
if grep -q "$1" "$2" ; then
|
||||
echo "$(basename "$2") - OK..."
|
||||
else
|
||||
echo "$(basename "$2"), FAIL..."
|
||||
echo "Please report this to https://forge.switnet.net/switnet/quick-jibri-installer"
|
||||
exit
|
||||
fi
|
||||
}
|
||||
clear
|
||||
printf '
|
||||
printwc "${Green}" '
|
||||
########################################################################
|
||||
Welcome to Jitsi/Jibri Installer
|
||||
########################################################################
|
||||
|
@ -133,14 +169,16 @@ printf '
|
|||
Featuring:
|
||||
- Jibri Recording and YouTube Streaming
|
||||
- Jibri Recordings Access via Nextcloud
|
||||
- Jigasi Transcription (Advanced)
|
||||
- Grafana Statistics
|
||||
- Etherpad
|
||||
- Whiteboard
|
||||
- Customized brandless mode
|
||||
- Recurring changes updater
|
||||
- Recurring updater
|
||||
|
||||
Learn more about these at,
|
||||
Main repository: https://github.com/switnet-ltd/quick-jibri-installer
|
||||
Wiki and documentation: https://github.com/switnet-ltd/quick-jibri-installer/wiki\n'
|
||||
|
||||
Main repository: https://forge.switnet.net/switnet/quick-jibri-installer
|
||||
Wiki and documentation: https://forge.switnet.net/switnet/quick-jibri-installer/wiki\n\n'
|
||||
sleep .1
|
||||
read -n 1 -s -r -p "Press any key to continue..."$'\n'
|
||||
|
||||
#Check if user is root
|
||||
|
@ -158,13 +196,11 @@ else
|
|||
exit
|
||||
fi
|
||||
#Suggest 22.04 LTS release over 20.04 in April 2024
|
||||
TODAY=$(date +%s)
|
||||
NEXT_LTS_DATE=$(date -d 2024-04-01 +%s)
|
||||
|
||||
if [ "$DIST" = "focal" ]; then
|
||||
if [ "$TODAY" -gt "$NEXT_LTS_DATE" ]; then
|
||||
echo " > $(lsb_release -sc), even when it's compatible and functional.
|
||||
We suggest to use the next (LTS) release, for longer support and security reasons."
|
||||
echo " > $(lsb_release -sc), even when it's compatible and functional."
|
||||
echo -n " We suggest to use the next (LTS) release, for longer"
|
||||
echo " support and security reasons."
|
||||
read -n 1 -s -r -p "Press any key to continue..."$'\n'
|
||||
else
|
||||
echo "Focal is supported."
|
||||
|
@ -174,7 +210,8 @@ fi
|
|||
#Check system resources
|
||||
printf "\n\nVerifying System Resources:"
|
||||
if [ "$(nproc --all)" -lt 4 ];then
|
||||
printf "\nWarning!: The system do not meet the minimum CPU requirements for Jibri to run."
|
||||
printf "\nWarning!: The system do not meet the minimum CPU"
|
||||
printf " requirements for Jibri to run."
|
||||
printf "\n>> We recommend 4 cores/threads for Jibri!\n"
|
||||
CPU_MIN="N"
|
||||
else
|
||||
|
@ -185,7 +222,8 @@ sleep .1
|
|||
### Test RAM size (8GB min) ###
|
||||
mem_available="$(grep MemTotal /proc/meminfo| grep -o '[0-9]\+')"
|
||||
if [ "$mem_available" -lt 7700000 ]; then
|
||||
printf "\nWarning!: The system do not meet the minimum RAM requirements for Jibri to run."
|
||||
printf "\nWarning!: The system do not meet the minimum RAM"
|
||||
printf " requirements for Jibri to run."
|
||||
printf "\n>> We recommend 8GB RAM for Jibri!\n\n"
|
||||
MEM_MIN="N"
|
||||
else
|
||||
|
@ -197,8 +235,10 @@ if [ "$CPU_MIN" = "Y" ] && [ "$MEM_MIN" = "Y" ];then
|
|||
echo "All requirements seems meet!"
|
||||
printf "\n - We hope you have a nice recording/streaming session\n"
|
||||
else
|
||||
printf "CPU (%s)/RAM (%s MiB) does NOT meet minimum recommended requirements!" "$(nproc --all)" "$((mem_available/1024))"
|
||||
printf "\nEven when you can use the videoconferencing sessions, we advice to increase the resources in order to user Jibri.\n\n"
|
||||
printf "CPU (%s)/RAM (%s MiB)" "$(nproc --all)" "$((mem_available/1024))"
|
||||
printf " does NOT meet minimum recommended requirements!"
|
||||
printf "\nEven when you can use the videoconferencing sessions, we"
|
||||
printf " advice to increase the resources in order to user Jibri.\n\n"
|
||||
sleep .1
|
||||
while [ "$CONTINUE_LOW_RES" != "yes" ] && [ "$CONTINUE_LOW_RES" != "no" ]
|
||||
do
|
||||
|
@ -208,7 +248,8 @@ sleep .1
|
|||
exit
|
||||
elif [ "$CONTINUE_LOW_RES" = "yes" ]; then
|
||||
printf "\n - We highly recommend to increase the server resources."
|
||||
printf "\n - Otherwise, please think about adding dedicated jibri nodes instead.\n\n"
|
||||
printf "\n - Otherwise, please think about adding dedicated"
|
||||
printf " jibri nodes instead.\n\n"
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
@ -218,11 +259,13 @@ echo 'This server will likely have issues due the lack of resources.
|
|||
If you plan to enable other components such as,
|
||||
|
||||
- JRA via Nextcloud
|
||||
- Jigasi Transcriber
|
||||
- Additional Jibri Nodes
|
||||
- others.
|
||||
- Grafana
|
||||
- Etherpad
|
||||
- Whiteboards
|
||||
- Connect additional Jibri Nodes
|
||||
- Others
|
||||
|
||||
>>> We higly recommend to increase resources of this server. <<<
|
||||
>>> We highly recommend to increase resources of this server. <<<
|
||||
|
||||
For now we advice to disable the Jibri service locally and add an external
|
||||
Jibri node once this installation has finished, using our script:
|
||||
|
@ -234,27 +277,32 @@ sleep .1
|
|||
do
|
||||
read -p "> Do you want to disable local jibri service?: (yes or no)$NL" -r DISABLE_LOCAL_JIBRI
|
||||
if [ "$DISABLE_LOCAL_JIBRI" = "no" ]; then
|
||||
printf " - Please keep in mind that we might not support underpowered servers.\n"
|
||||
printf " - Please keep in mind that we might not support"
|
||||
printf " underpowered servers.\n"
|
||||
elif [ "$DISABLE_LOCAL_JIBRI" = "yes" ]; then
|
||||
printf " - You can add dedicated jibri nodes later, see more at the wiki.\n"
|
||||
printf " - You can add dedicated jibri nodes later, see more"
|
||||
printf " at the wiki.\n"
|
||||
fi
|
||||
done
|
||||
fi
|
||||
sleep .1
|
||||
#Check system oriented porpuse
|
||||
apt-get -yq2 update
|
||||
apt-get -q2 update
|
||||
SYSTEM_DE="$(apt-cache search "ubuntu-(desktop|mate-desktop)"|awk '{print$1}'|xargs|sed 's|$| trisquel triskel trisquel-mini|')"
|
||||
SYSTEM_DE_ARRAY=( "$SYSTEM_DE" )
|
||||
printf "\nChecking for common desktop system oriented purpose....\n"
|
||||
for de in "${SYSTEM_DE_ARRAY[@]}"
|
||||
do
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$de" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
printf "\n > This instance has %s installed, exiting...
|
||||
\nPlease avoid using this installer on a desktop-user oriented GNU/Linux system.
|
||||
This is an unsupported use, as it will likely BREAK YOUR SYSTEM, so please don't." "$de"
|
||||
printf "\n > This instance has %s installed, exiting...\n" "$de"
|
||||
printf "\nPlease avoid using this installer on a desktop-user"
|
||||
printf " oriented GNU/Linux system.\n"
|
||||
printf "This is an unsupported use, as it will likely BREAK YOUR"
|
||||
printf " SYSTEM, so please don't.\n"
|
||||
exit
|
||||
else
|
||||
printf " > No standard desktop environment for user oriented porpuse detected, good!, continuing...\n\n"
|
||||
printf " > No standard desktop environment for user oriented"
|
||||
printf " porpuse detected, good!, continuing...\n\n"
|
||||
fi
|
||||
done
|
||||
sleep .1
|
||||
|
@ -266,8 +314,11 @@ printf "\nAdd Jitsi repo\n"
|
|||
if [ "$JITSI_REPO" = "stable" ]; then
|
||||
printf " - Jitsi stable repository already installed\n\n"
|
||||
else
|
||||
echo 'deb [signed-by=/etc/apt/trusted.gpg.d/jitsi-key.gpg.key] http://download.jitsi.org stable/' > /etc/apt/sources.list.d/jitsi-stable.list
|
||||
curl -s https://download.jitsi.org/jitsi-key.gpg.key > /etc/apt/trusted.gpg.d/jitsi-key.gpg.key
|
||||
echo "deb [signed-by=$JITSI_GPG_KEY] http://download.jitsi.org stable/" \
|
||||
> /etc/apt/sources.list.d/jitsi-stable.list
|
||||
curl -s https://download.jitsi.org/jitsi-key.gpg.key \
|
||||
> "$JITSI_GPG_KEY"
|
||||
apt-get update -q2
|
||||
JITSI_REPO="stable"
|
||||
fi
|
||||
sleep .1
|
||||
|
@ -279,7 +330,8 @@ if [ "$LE_SSL" = yes ]; then
|
|||
printf " - We'll setup Let's Encrypt SSL certs.\n\n"
|
||||
else
|
||||
printf " - We'll let you choose later on for it."
|
||||
printf " Please be aware that a valid SSL cert is required for some features to work properly.\n\n"
|
||||
printf " Please be aware that a valid SSL cert is required for"
|
||||
printf " some features to work properly.\n\n"
|
||||
fi
|
||||
done
|
||||
sleep .1
|
||||
|
@ -306,23 +358,26 @@ sleep .1
|
|||
sleep .1
|
||||
#Simple DNS test
|
||||
if [ "$PUBLIC_IP" = "$(dig -4 +short "$JITSI_DOMAIN"||awk -v RS='([0-9]+\\.){3}[0-9]+' 'RT{print RT}')" ]; then
|
||||
printf "\nServer public IP & DNS record for %s seems to match, continuing..." "$JITSI_DOMAIN"
|
||||
printf "\nServer public IP & DNS record for"
|
||||
printf " %s seems to match, continuing..." "$JITSI_DOMAIN"
|
||||
else
|
||||
echo "Server public IP ($PUBLIC_IP) & DNS record for $JITSI_DOMAIN don't seem to match."
|
||||
echo " > Please check your dns records are applied and updated, otherwise components may fail."
|
||||
read -p " > Do you want to continue?: (yes or no)$NL" -r DNS_CONTINUE
|
||||
echo -n "Server public IP ($PUBLIC_IP) & DNS record for $JITSI_DOMAIN"
|
||||
echo " don't seem to match."
|
||||
echo -n " > Please check your dns records are applied and updated,"
|
||||
echo " otherwise components may fail."
|
||||
read -p " > Do you want to continue?: (yes or no)$NL" -r DNS_CONTINUE
|
||||
if [ "$DNS_CONTINUE" = "yes" ]; then
|
||||
echo " - We'll continue anyway..."
|
||||
echo " - We'll continue anyway..."
|
||||
else
|
||||
echo " - Exiting for now..."
|
||||
exit
|
||||
echo " - Exiting for now..."
|
||||
exit
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
sleep .1
|
||||
# Requirements
|
||||
printf "\nWe'll start by installing system requirements this may take a while please be patient...\n"
|
||||
apt-get update -q2
|
||||
printf "\nWe'll start by installing system requirements this may take"
|
||||
printf " a while please be patient...\n"
|
||||
apt-get dist-upgrade -yq2
|
||||
|
||||
apt-get -y install \
|
||||
|
@ -343,14 +398,15 @@ if [ "$LE_SSL" = "yes" ]; then
|
|||
apt-get -y install \
|
||||
certbot
|
||||
if [ "$(dpkg-query -W -f='${Status}' ufw 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo "# Disable pre-installed ufw, more on firewall see:
|
||||
> https://github.com/switnet-ltd/quick-jibri-installer/wiki/Firewall"
|
||||
echo "# Disable pre-installed ufw, more on firewall see:"
|
||||
echo " > https://forge.switnet.net/switnet/quick-jibri-installer/wiki/Firewall"
|
||||
ufw disable
|
||||
fi
|
||||
fi
|
||||
|
||||
echo "# Check and Install HWE kernel if possible..."
|
||||
HWE_VIR_MOD="$(apt-cache madison linux-image-generic-hwe-"$(lsb_release -sr)" 2>/dev/null|head -n1|grep -c "hwe-$(lsb_release -sr)")"
|
||||
HWE_VIR_MOD="$(apt-cache madison linux-image-generic-hwe-"$(lsb_release -sr)" \
|
||||
2>/dev/null|head -n1|grep -c "hwe-$(lsb_release -sr)")"
|
||||
if [ "$HWE_VIR_MOD" = "1" ]; then
|
||||
apt-get -y install \
|
||||
linux-image-generic-hwe-"$(lsb_release -sr)" \
|
||||
|
@ -369,11 +425,15 @@ echo "
|
|||
#--------------------------------------------------
|
||||
"
|
||||
if [ "$LE_SSL" = "yes" ]; then
|
||||
echo "set jitsi-meet/cert-choice select Generate a new self-signed certificate (You will later get a chance to obtain a Let's encrypt certificate)" | debconf-set-selections
|
||||
echo "jitsi-videobridge2 jitsi-videobridge/jvb-hostname string $JITSI_DOMAIN" | debconf-set-selections
|
||||
echo "jitsi-meet-web-config jitsi-meet/email string $SYSADMIN_EMAIL" | debconf-set-selections
|
||||
echo "set jitsi-meet/cert-choice select $CERT_CHOICE_DEBCONF" \
|
||||
| debconf-set-selections
|
||||
echo "jitsi-videobridge2 jitsi-videobridge/jvb-hostname string $JITSI_DOMAIN" \
|
||||
| debconf-set-selections
|
||||
echo "jitsi-meet-web-config jitsi-meet/email string $SYSADMIN_EMAIL" \
|
||||
| debconf-set-selections
|
||||
fi
|
||||
echo "jitsi-meet-web-config jitsi-meet/jaas-choice boolean false" | debconf-set-selections
|
||||
echo "jitsi-meet-web-config jitsi-meet/jaas-choice boolean false" \
|
||||
| debconf-set-selections
|
||||
apt-get -y install \
|
||||
jitsi-meet \
|
||||
jibri \
|
||||
|
@ -383,16 +443,20 @@ apt-get -y install \
|
|||
#https://github.com/openssl/openssl/issues/7754#issuecomment-444063355
|
||||
sed -i "/RANDFILE/d" /etc/ssl/openssl.cnf
|
||||
|
||||
echo "
|
||||
#--------------------------------------------------
|
||||
# Install NodeJS
|
||||
print_title "Install NodeJS $NODEJS_VER.x"
|
||||
#--------------------------------------------------
|
||||
"
|
||||
if [ "$(dpkg-query -W -f='${Status}' nodejs 2>/dev/null | grep -c "ok")" == "1" ]; then
|
||||
echo "Nodejs is installed, skipping..."
|
||||
else
|
||||
curl -sL https://deb.nodesource.com/setup_14.x | sudo -E bash -
|
||||
mkdir -p /etc/apt/keyrings
|
||||
curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key \
|
||||
| gpg --dearmor -o "$NODEJS_GPG_KEY"
|
||||
echo "deb [signed-by=$NODEJS_GPG_KEY] https://deb.nodesource.com/node_$NODEJS_VER.x nodistro main" | \
|
||||
tee /etc/apt/sources.list.d/nodesource.list
|
||||
apt-get update -q2
|
||||
apt-get install -yq2 nodejs
|
||||
|
||||
echo "Installing nodejs esprima package..."
|
||||
npm install -g esprima
|
||||
fi
|
||||
|
@ -404,9 +468,6 @@ elif [ "$(npm list -g esprima 2>/dev/null | grep -c "esprima")" == "1" ]; then
|
|||
echo "Good. Esprima package is already installed"
|
||||
fi
|
||||
|
||||
CHD_LTST=$(curl -sL https://chromedriver.storage.googleapis.com/LATEST_RELEASE)
|
||||
GCMP_JSON="/etc/opt/chrome/policies/managed/managed_policies.json"
|
||||
|
||||
echo "# Installing Google Chrome / ChromeDriver"
|
||||
if [ "$GOOGLE_ACTIVE_REPO" = "main" ]; then
|
||||
echo "Google repository already set."
|
||||
|
@ -418,15 +479,22 @@ else
|
|||
fi
|
||||
apt-get -q2 update
|
||||
apt-get install -yq2 google-chrome-stable
|
||||
rm -rf /etc/apt/sources.list.d/dl_google_com_linux_chrome_deb.list
|
||||
rm -rf "$GOOGL_REPO"
|
||||
|
||||
G_CHROME=$(apt-cache madison google-chrome-stable|awk '{print$3}'|cut -d. -f1-3)
|
||||
CHROMELAB_URL="https://googlechromelabs.github.io/chrome-for-testing"
|
||||
CHD_LTST_DWNL=$(curl -s $CHROMELAB_URL/known-good-versions-with-downloads.json | jq -r ".versions[].downloads.chromedriver | select(. != null) | .[].url" | grep linux64 | grep "$G_CHROME" | tail -1)
|
||||
CHD_LTST=$(awk -F '/' '{print$7}' <<< "$CHD_LTST_DWNL")
|
||||
GCMP_JSON="/etc/opt/chrome/policies/managed/managed_policies.json"
|
||||
|
||||
if [ -f /usr/local/bin/chromedriver ]; then
|
||||
echo "Chromedriver already installed."
|
||||
else
|
||||
echo "Installing Chromedriver"
|
||||
wget -q https://chromedriver.storage.googleapis.com/"$CHD_LTST"/chromedriver_linux64.zip \
|
||||
wget -q "$CHD_LTST_DWNL" \
|
||||
-O /tmp/chromedriver_linux64.zip
|
||||
unzip -o /tmp/chromedriver_linux64.zip -d /usr/local/bin/
|
||||
mv /usr/local/bin/chromedriver-linux64/chromedriver /usr/local/bin/chromedriver
|
||||
chown root:root /usr/local/bin/chromedriver
|
||||
chmod 0755 /usr/local/bin/chromedriver
|
||||
rm -rf /tmp/chromedriver_linux64.zip
|
||||
|
@ -471,12 +539,19 @@ LE_RENEW_LOG="/var/log/letsencrypt/renew.log"
|
|||
MOD_LISTU="https://prosody.im/files/mod_listusers.lua"
|
||||
MOD_LIST_FILE="/usr/lib/prosody/modules/mod_listusers.lua"
|
||||
ENABLE_SA="yes"
|
||||
GC_SDK_REL_FILE="http://packages.cloud.google.com/apt/dists/cloud-sdk-$(lsb_release -sc)/Release"
|
||||
MJS_RAND_TAIL="$(tr -dc "a-zA-Z0-9" < /dev/urandom | fold -w 4 | head -n1)"
|
||||
MJS_USER="jbsync_$MJS_RAND_TAIL"
|
||||
MJS_USER_PASS="$(tr -dc "a-zA-Z0-9#_*=" < /dev/urandom | fold -w 32 | head -n1)"
|
||||
FQDN_HOST="fqdn"
|
||||
JIBRI_XORG_CONF="/etc/jitsi/jibri/xorg-video-dummy.conf"
|
||||
WS_MATCH1="# ensure all static content can always be found first"
|
||||
MEET_MATCH1="disable simulcast support."
|
||||
#GC_SDK_REL_FILE="http://packages.cloud.google.com/apt/dists/cloud-sdk-$(lsb_release -sc)/Release"
|
||||
|
||||
# Make sure we can rely on the match strings.
|
||||
printf "> Testing match strings on config files.\n"
|
||||
test_match "$WS_MATCH1" "$WS_CONF"
|
||||
test_match "$MEET_MATCH1" "$MEET_CONF"
|
||||
|
||||
# Rename hostname for jitsi server
|
||||
while [ "$FQDN_HOST" != "yes" ] && [ "$FQDN_HOST" != "no" ] && [ -n "$FQDN_HOST" ]
|
||||
|
@ -568,17 +643,20 @@ select opt in "${options[@]}"
|
|||
do
|
||||
case $opt in
|
||||
"Local")
|
||||
printf "\n > Users are created manually using prosodyctl, only moderators can open a room or launch recording.\n"
|
||||
printf "\n > Users are created manually using prosodyctl,"
|
||||
printf " only moderators can open a room or launch recording.\n"
|
||||
ENABLE_SC="yes"
|
||||
break
|
||||
;;
|
||||
"JWT")
|
||||
printf "\n > A external app manage the token usage/creation, like RocketChat does.\n"
|
||||
printf "\n > A external app manage the token usage/creation,"
|
||||
printf " like RocketChat does.\n"
|
||||
ENABLE_JWT="yes"
|
||||
break
|
||||
;;
|
||||
"None")
|
||||
printf "\n > Everyone can access the room as moderators as there is no auth mechanism.\n"
|
||||
printf "\n > Everyone can access the room as moderators as"
|
||||
printf " there is no auth mechanism.\n"
|
||||
break
|
||||
;;
|
||||
*) echo "Invalid option $REPLY, choose 1, 2 or 3";;
|
||||
|
@ -586,19 +664,22 @@ do
|
|||
done
|
||||
sleep .1
|
||||
# Set jibris default resolution
|
||||
printf "\n> What jibri resolution should be the default for this and all the following jibri nodes?\n"
|
||||
printf "\n> What jibri resolution should be the default for this and all"
|
||||
printf " the following jibri nodes?\n"
|
||||
PS3='The more resolution the more resources jibri will require to record properly: '
|
||||
jib_res=("HD 720" "FHD 1080")
|
||||
select res in "${jib_res[@]}"
|
||||
do
|
||||
case $res in
|
||||
"HD 720")
|
||||
printf "\n > HD (1280x720) is good enough for most cases, and requires a moderate high hw requirements.\n\n"
|
||||
printf "\n > HD (1280x720) is good enough for most cases,"
|
||||
printf " and requires a moderate high hw requirements.\n\n"
|
||||
JIBRI_RES="720"
|
||||
break
|
||||
;;
|
||||
"FHD 1080")
|
||||
printf "\n > Full HD (1920x1080) is the best resolution available, it also requires high hw requirements.\n\n"
|
||||
printf "\n > Full HD (1920x1080) is the best resolution"
|
||||
printf " available, it also requires high hw requirements.\n\n"
|
||||
JIBRI_RES="1080"
|
||||
break
|
||||
;;
|
||||
|
@ -621,7 +702,7 @@ fi
|
|||
while [ "$ENABLE_NC_ACCESS" != "yes" ] && [ "$ENABLE_NC_ACCESS" != "no" ]
|
||||
do
|
||||
read -p "> Do you want to setup Jibri Records Access via Nextcloud: (yes or no)
|
||||
( Please check requirements at: https://github.com/switnet-ltd/quick-jibri-installer )$NL" -r ENABLE_NC_ACCESS
|
||||
( Please check requirements at: https://forge.switnet.net/switnet/quick-jibri-installer )$NL" -r ENABLE_NC_ACCESS
|
||||
if [ "$ENABLE_NC_ACCESS" = "no" ]; then
|
||||
printf " - JRA via Nextcloud won't be enabled.\n\n"
|
||||
elif [ "$ENABLE_NC_ACCESS" = "yes" ]; then
|
||||
|
@ -629,31 +710,31 @@ do
|
|||
fi
|
||||
done
|
||||
sleep .1
|
||||
#Jigasi
|
||||
if [ "$(curl -s -o /dev/null -w "%{http_code}" "$GC_SDK_REL_FILE" )" == "404" ]; then
|
||||
printf "> Sorry Google SDK doesn't have support yet for %s,
|
||||
thus, Jigasi Transcript can't be enable.\n\n" "$(lsb_release -sd)"
|
||||
elif [ "$(curl -s -o /dev/null -w "%{http_code}" "$GC_SDK_REL_FILE" )" == "200" ]; then
|
||||
while [ "$ENABLE_TRANSCRIPT" != "yes" ] && [ "$ENABLE_TRANSCRIPT" != "no" ]
|
||||
do
|
||||
read -p "> Do you want to setup Jigasi Transcription: (yes or no)
|
||||
( Please check requirements at: https://github.com/switnet-ltd/quick-jibri-installer )$NL" -r ENABLE_TRANSCRIPT
|
||||
if [ "$ENABLE_TRANSCRIPT" = "no" ]; then
|
||||
printf " - Jigasi Transcription won't be enabled.\n\n"
|
||||
elif [ "$ENABLE_TRANSCRIPT" = "yes" ]; then
|
||||
printf " - Jigasi Transcription will be enabled.\n\n"
|
||||
fi
|
||||
done
|
||||
else
|
||||
echo "No valid option for Jigasi. Please report this to
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues"
|
||||
fi
|
||||
##Jigasi
|
||||
#if [ "$(curl -s -o /dev/null -w "%{http_code}" "$GC_SDK_REL_FILE" )" == "404" ]; then
|
||||
#printf "> Sorry Google SDK doesn't have support yet for %s,
|
||||
#thus, Jigasi Transcript can't be enable.\n\n" "$(lsb_release -sd)"
|
||||
#elif [ "$(curl -s -o /dev/null -w "%{http_code}" "$GC_SDK_REL_FILE" )" == "200" ]; then
|
||||
#while [ "$ENABLE_TRANSCRIPT" != "yes" ] && [ "$ENABLE_TRANSCRIPT" != "no" ]
|
||||
#do
|
||||
#read -p "> Do you want to setup Jigasi Transcription: (yes or no)
|
||||
#( Please check requirements at: https://forge.switnet.net/switnet/quick-jibri-installer )$NL" -r ENABLE_TRANSCRIPT
|
||||
#if [ "$ENABLE_TRANSCRIPT" = "no" ]; then
|
||||
#printf " - Jigasi Transcription won't be enabled.\n\n"
|
||||
#elif [ "$ENABLE_TRANSCRIPT" = "yes" ]; then
|
||||
#printf " - Jigasi Transcription will be enabled.\n\n"
|
||||
#fi
|
||||
#done
|
||||
#else
|
||||
#echo "No valid option for Jigasi. Please report this to
|
||||
#https://forge.switnet.net/switnet/quick-jibri-installer/issues"
|
||||
#fi
|
||||
sleep .1
|
||||
#Grafana
|
||||
while [ "$ENABLE_GRAFANA_DSH" != "yes" ] && [ "$ENABLE_GRAFANA_DSH" != "no" ]
|
||||
do
|
||||
read -p "> Do you want to setup Grafana Dashboard: (yes or no)
|
||||
( Please check requirements at: https://github.com/switnet-ltd/quick-jibri-installer )$NL" -r ENABLE_GRAFANA_DSH
|
||||
( Please check requirements at: https://forge.switnet.net/switnet/quick-jibri-installer )$NL" -r ENABLE_GRAFANA_DSH
|
||||
if [ "$ENABLE_GRAFANA_DSH" = "no" ]; then
|
||||
printf " - Grafana Dashboard won't be enabled.\n\n"
|
||||
elif [ "$ENABLE_GRAFANA_DSH" = "yes" ]; then
|
||||
|
@ -666,9 +747,20 @@ while [ "$ENABLE_DOCKERPAD" != "yes" ] && [ "$ENABLE_DOCKERPAD" != "no" ]
|
|||
do
|
||||
read -p "> Do you want to setup Docker Etherpad: (yes or no)$NL" -r ENABLE_DOCKERPAD
|
||||
if [ "$ENABLE_DOCKERPAD" = "no" ]; then
|
||||
printf " - Docker Etherpad won't be enabled.\n"
|
||||
printf " - Docker Etherpad won't be enabled.\n\n"
|
||||
elif [ "$ENABLE_DOCKERPAD" = "yes" ]; then
|
||||
printf " - Docker Etherpad will be enabled.\n"
|
||||
printf " - Docker Etherpad will be enabled.\n\n"
|
||||
fi
|
||||
done
|
||||
sleep .1
|
||||
#Excalidraw Whiteboard
|
||||
while [ "$ENABLE_WHITEBOARD" != "yes" ] && [ "$ENABLE_WHITEBOARD" != "no" ]
|
||||
do
|
||||
read -p "> Do you want to setup Excalidraw Whiteboard backend: (yes or no)$NL" -r ENABLE_WHITEBOARD
|
||||
if [ "$ENABLE_WHITEBOARD" = "no" ]; then
|
||||
printf " - Excalidraw Whiteboard won't be enabled.\n\n"
|
||||
elif [ "$ENABLE_WHITEBOARD" = "yes" ]; then
|
||||
printf " - Excalidraw Whiteboard will be enabled.\n\n"
|
||||
fi
|
||||
done
|
||||
sleep .1
|
||||
|
@ -685,7 +777,7 @@ INT_CONF_ETC="/etc/jitsi/meet/$DOMAIN-interface_config.js"
|
|||
ssl_wa() {
|
||||
if [ "$LE_SSL" = "yes" ]; then
|
||||
systemctl stop "$1"
|
||||
certbot certonly --standalone --renew-by-default --agree-tos --email "$5" -d "$6"
|
||||
certbot certonly --standalone --renew-by-default --agree-tos --email "$5" -d "$6" --non-interactive
|
||||
sed -i "s|/etc/jitsi/meet/$3.crt|/etc/letsencrypt/live/$3/fullchain.pem|" "$4"
|
||||
sed -i "s|/etc/jitsi/meet/$3.key|/etc/letsencrypt/live/$3/privkey.pem|" "$4"
|
||||
systemctl restart "$1"
|
||||
|
@ -719,7 +811,7 @@ restart_services() {
|
|||
}
|
||||
|
||||
# Configure Jvb2
|
||||
sed -i "/shard.HOSTNAME/s|localhost|$DOMAIN|" /etc/jitsi/videobridge/sip-communicator.properties
|
||||
sed -i "/shard.HOSTNAME/s|localhost|$DOMAIN|" "$JVB2_SIP"
|
||||
|
||||
# Configure Jibri
|
||||
if [ "$ENABLE_SC" = "yes" ]; then
|
||||
|
@ -727,9 +819,11 @@ if [ "$ENABLE_SC" = "yes" ]; then
|
|||
printf "\n-> Adding external module to list prosody users...\n"
|
||||
curl -s "$MOD_LISTU" > "$MOD_LIST_FILE"
|
||||
|
||||
printf "Now you can check registered users with:\nprosodyctl mod_listusers\n"
|
||||
printf "Now you can check registered users with:"
|
||||
printf " \n prosodyctl mod_listusers\n"
|
||||
else
|
||||
printf "Prosody support for listing users seems to be enabled. \ncheck with: prosodyctl mod_listusers\n"
|
||||
printf "Prosody support for listing users seems to be enabled.check with:"
|
||||
printf " \n prosodyctl mod_listusers\n"
|
||||
fi
|
||||
|
||||
fi
|
||||
|
@ -1012,15 +1106,15 @@ sed -i "s|MJS_USER_PASS=.*|MJS_USER_PASS=\"$MJS_USER_PASS\"|" add-jvb2-node.sh
|
|||
|
||||
#Tune webserver for Jitsi App control
|
||||
if [ -f "$WS_CONF" ]; then
|
||||
sed -i "/# ensure all static content can always be found first/i \\\n" "$WS_CONF"
|
||||
sed -i "/# ensure all static content can always be found first/i \ \ \ \ location = \/external_api.min.js {" "$WS_CONF"
|
||||
sed -i "/# ensure all static content can always be found first/i \ \ \ \ \ \ \ \ alias \/usr\/share\/jitsi-meet\/libs\/external_api.min.js;" "$WS_CONF"
|
||||
sed -i "/# ensure all static content can always be found first/i \ \ \ \ }" "$WS_CONF"
|
||||
sed -i "/# ensure all static content can always be found first/i \\\n" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \\\n" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ location = \/external_api.min.js {" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ \ \ \ \ alias \/usr\/share\/jitsi-meet\/libs\/external_api.min.js;" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \ \ \ \ }" "$WS_CONF"
|
||||
sed -i "/$WS_MATCH1/i \\\n" "$WS_CONF"
|
||||
systemctl reload nginx
|
||||
else
|
||||
echo "No app configuration done to server file, please report to:
|
||||
-> https://github.com/switnet-ltd/quick-jibri-installer/issues"
|
||||
echo "No app configuration done to server file, please report to:"
|
||||
echo " -> https://forge.switnet.net/switnet/quick-jibri-installer/issues"
|
||||
fi
|
||||
#Static avatar
|
||||
if [ "$ENABLE_SA" = "yes" ] && [ -f "$WS_CONF" ]; then
|
||||
|
@ -1039,8 +1133,8 @@ if [ "$DROP_TLS1" = "yes" ];then
|
|||
elif [ "$DROP_TLS1" = "no" ];then
|
||||
printf "\nNo TLSv1/1.1 dropping was done.\n\n"
|
||||
else
|
||||
echo "No condition meet, please report to
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues "
|
||||
echo -n "No condition meet, please report to:"
|
||||
echo "https://forge.switnet.net/switnet/quick-jibri-installer/issues"
|
||||
fi
|
||||
sleep .1
|
||||
#================== Setup prosody conf file =================
|
||||
|
@ -1058,9 +1152,9 @@ if [ "$ENABLE_SC" = "yes" ]; then
|
|||
prosodyctl register "$SEC_ROOM_USER" "$DOMAIN" "$SEC_ROOM_PASS"
|
||||
sleep .1
|
||||
printf "\nSecure rooms are being enabled...\n"
|
||||
echo "You'll be able to login Secure Room chat with '${SEC_ROOM_USER}' \
|
||||
or '${SEC_ROOM_USER}@${DOMAIN}' using the password you just entered.
|
||||
If you have issues with the password refer to your sysadmin."
|
||||
echo -n "You'll be able to login Secure Room chat with '${SEC_ROOM_USER}' "
|
||||
echo "or '${SEC_ROOM_USER}@${DOMAIN}' using the password you just entered."
|
||||
echo "If you have issues with the password refer to your sysadmin."
|
||||
sed -i "s|#org.jitsi.jicofo.auth.URL=XMPP:|org.jitsi.jicofo.auth.URL=XMPP:|" "$JICOFO_SIP"
|
||||
sed -i "s|SEC_ROOM=.*|SEC_ROOM=\"on\"|" jm-bm.sh
|
||||
fi
|
||||
|
@ -1119,24 +1213,24 @@ fi
|
|||
sed -i "s|// prejoinPageEnabled:.*|prejoinPageEnabled: true,|" "$MEET_CONF"
|
||||
|
||||
#Set HD resolution and widescreen format
|
||||
sed -i "/Enable \/ disable simulcast support/i \/\/ Start QJI - Set resolution and widescreen format" "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ resolution: 720," "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ constraints: {" "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ aspectRatio: 16 \/ 9," "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ video: {" "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ height: {" "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ ideal: 720," "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ max: 720," "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ min: 180" "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ }," "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ width: {" "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ ideal: 1280," "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ max: 1280," "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ min: 320" "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ \ \ \ \ }" "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ \ \ \ \ }" "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \ \ \ \ \ }," "$MEET_CONF"
|
||||
sed -i "/Enable \/ disable simulcast support/i \/\/ End QJI" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \/\/ Start QJI - Set resolution and widescreen format" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ resolution: 720," "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ constraints: {" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ aspectRatio: 16 \/ 9," "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ video: {" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ height: {" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ ideal: 720," "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ max: 720," "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ min: 180" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ }," "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ width: {" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ ideal: 1280," "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ max: 1280," "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ min: 320" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ \ \ \ \ }" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ \ \ \ \ }" "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \ \ \ \ \ }," "$MEET_CONF"
|
||||
sed -i "/$MEET_MATCH1/i \/\/ End QJI" "$MEET_CONF"
|
||||
|
||||
#Check config file
|
||||
printf "\n# Checking %s file for errors\n" "$MEET_CONF"
|
||||
|
@ -1147,7 +1241,7 @@ else
|
|||
echo -e "\nWatch out!, there seems to be an issue on $MEET_CONF line:
|
||||
$CHECKJS
|
||||
Most of the times this is due upstream changes, please report to
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
fi
|
||||
|
||||
#Enable jibri services
|
||||
|
@ -1160,7 +1254,8 @@ if [ "$DISABLE_LOCAL_JIBRI" = "yes" ]; then
|
|||
systemctl disable jibri
|
||||
systemctl disable jibri-xorg
|
||||
systemctl disable jibri-icewm
|
||||
# Manually apply permissions since finalize_recording.sh won't be triggered under this server options.
|
||||
# Manually apply permissions since finalize_recording.sh won't be
|
||||
# triggered under this server options.
|
||||
chmod -R 770 "$DIR_RECORD"
|
||||
fi
|
||||
|
||||
|
@ -1199,8 +1294,9 @@ if [ -f "$WS_CONF" ]; then
|
|||
sed -i "/external_api.js/i \\\n" "$WS_CONF"
|
||||
systemctl reload nginx
|
||||
else
|
||||
echo "No interface_config.js configuration done to server file, please report to:
|
||||
-> https://github.com/switnet-ltd/quick-jibri-installer/issues"
|
||||
printf "No interface_config.js configuration done to server file,"
|
||||
printf " please report to:"
|
||||
printf " -> https://forge.switnet.net/switnet/quick-jibri-installer/issues"
|
||||
fi
|
||||
#JRA via Nextcloud
|
||||
if [ "$ENABLE_NC_ACCESS" = "yes" ]; then
|
||||
|
@ -1233,6 +1329,16 @@ if [ "$ENABLE_DOCKERPAD" = "yes" ]; then
|
|||
fi
|
||||
fi
|
||||
sleep .1
|
||||
#Excalidraw Whiteboard
|
||||
if [ "$ENABLE_WHITEBOARD" = "yes" ]; then
|
||||
printf "\nExcalidraw Whiteboard will be enabled."
|
||||
if [ "$MODE" = "debug" ]; then
|
||||
bash "$PWD"/excalidraw-backend.sh -m debug
|
||||
else
|
||||
bash "$PWD"/excalidraw-backend.sh
|
||||
fi
|
||||
fi
|
||||
sleep .1
|
||||
#Prevent JMS conecction issue
|
||||
if [ -z "$(awk "/127.0.0.1/&&/$DOMAIN/{print\$1}" /etc/hosts)" ];then
|
||||
sed -i "/127.0.0.1/a \\
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# Automated AWS generic kernel setup for jibri.
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# Simple Fail2ban configuration
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GNU GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# Simple Jibri conf updater
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GNU GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
@ -77,18 +77,18 @@ if [ -f "$CONF_JSON"_disabled ] && \
|
|||
[ -f "$JIBRI_CONF" ] && \
|
||||
[ -f "$JIBRI_CONF"-dpkg-file ]; then
|
||||
echo -e "\n> This jibri config has been upgraded already, we'll exit...\n\nIf you think there maybe an error on checking you current jibri configuration.\nPlease report this to \
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
exit
|
||||
elif [ ! -f "$CONF_JSON" ] && \
|
||||
[ -f "$JIBRI_CONF" ] && \
|
||||
[ -f "$JIBRI_CONF"-dpkg-file ]; then
|
||||
echo -e "\n> This jibri seems to be running the latest configuration already, we'll exit...\n\nIf you think there maybe an error on checking you current jibri configuration.\nPlease report this to \
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
exit
|
||||
elif [ -f "$CONF_JSON" ] && \
|
||||
[ -f "$JIBRI_CONF" ]; then
|
||||
echo -e "\n> This jibri config seems to be candidate for upgrading, we'll continue...\nIf you think there maybe an error on checking you current jibri configuration.\nPlease report this to \
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
fi
|
||||
|
||||
#Read missing variables
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# Simple Jibri resolution enhancer
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GNU GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
|
|
@ -0,0 +1,138 @@
|
|||
#!/bin/bash
|
||||
# Automated PHP environment build for Nextcloud.
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
PHPVER=$1
|
||||
STABLE_PHP="$(apt-cache madison php|grep -v ppa|awk -F'[:+]' 'NR==1{print $2}')"
|
||||
DISTRO_RELEASE="$(lsb_release -sc)"
|
||||
PHP_REPO="$(apt-cache policy | awk '/http/&&/php/{print$2}' | awk -F "/" 'NR==1{print$5}')"
|
||||
PHP_REPO_URL="http://ppa.launchpad.net/ondrej/php/ubuntu"
|
||||
PHP_FPM_DIR="/etc/php/$PHPVER/fpm"
|
||||
PHP_INI="$PHP_FPM_DIR/php.ini"
|
||||
PHP_CONF="/etc/php/$PHPVER/fpm/pool.d/www.conf"
|
||||
TMP_GPG_REPO="$(mktemp -d)"
|
||||
|
||||
if [ $# -ne 1 ]; then
|
||||
echo "Usage: $0 8.2"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
install_ifnot() {
|
||||
if [ "$(dpkg-query -W -f='${Status}' "$1" 2>/dev/null | grep -c "ok installed")" == "1" ]; then
|
||||
echo " $1 is installed, skipping..."
|
||||
else
|
||||
printf "\n---- Installing %s ----" "$1"
|
||||
apt-get -yq2 install "$1"
|
||||
fi
|
||||
}
|
||||
|
||||
install_aval_package() {
|
||||
for i in $1
|
||||
do
|
||||
if [ -z "$(apt-cache madison "$i" 2>/dev/null)" ]; then
|
||||
echo " > Package $i not available on repo."
|
||||
else
|
||||
echo " > Add package $i to the install list"
|
||||
packages="$packages $i"
|
||||
fi
|
||||
done
|
||||
echo "$packages"
|
||||
apt-get -y install $packages #< don't quote.
|
||||
packages=""
|
||||
}
|
||||
|
||||
add_gpg_keyring() {
|
||||
apt-key adv --recv-keys --keyserver keyserver.ubuntu.com "$1"
|
||||
apt-key export "$1" | gpg --dearmour | tee "$TMP_GPG_REPO"/"$1".gpg >/dev/null
|
||||
apt-key del "$1"
|
||||
mv "$TMP_GPG_REPO"/"$1".gpg /etc/apt/trusted.gpg.d/
|
||||
}
|
||||
|
||||
add_php_repo() {
|
||||
if [ "$PHP_REPO" = "php" ]; then
|
||||
echo "PHP $PHPVER already installed"
|
||||
apt-get -q2 update
|
||||
apt-get -yq2 dist-upgrade
|
||||
else
|
||||
echo "# Adding Ondrej PHP $PHPVER PPA Repository"
|
||||
add_gpg_keyring E5267A6C
|
||||
echo "deb [arch=amd64] $PHP_REPO_URL $DISTRO_RELEASE main" | \
|
||||
tee /etc/apt/sources.list.d/php"$PHPVER".list
|
||||
apt-get update -q2
|
||||
fi
|
||||
}
|
||||
|
||||
add_php_repo
|
||||
|
||||
install_aval_package " \
|
||||
imagemagick \
|
||||
php$PHPVER-fpm \
|
||||
php$PHPVER-bcmath \
|
||||
php$PHPVER-bz2 \
|
||||
php$PHPVER-cli \
|
||||
php$PHPVER-cgi \
|
||||
php$PHPVER-curl \
|
||||
php$PHPVER-gd \
|
||||
php$PHPVER-gmp \
|
||||
php$PHPVER-imagick \
|
||||
php$PHPVER-intl \
|
||||
php$PHPVER-json \
|
||||
php$PHPVER-ldap \
|
||||
php$PHPVER-mbstring \
|
||||
php$PHPVER-pgsql \
|
||||
php$PHPVER-redis \
|
||||
php$PHPVER-soap \
|
||||
php$PHPVER-xml \
|
||||
php$PHPVER-xmlrpc \
|
||||
php$PHPVER-zip \
|
||||
redis-server \
|
||||
unzip \
|
||||
"
|
||||
|
||||
#System related
|
||||
install_ifnot smbclient
|
||||
sed -i "s|.*env\[HOSTNAME\].*|env\[HOSTNAME\] = \$HOSTNAME|" "$PHP_CONF"
|
||||
sed -i "s|.*env\[PATH\].*|env\[PATH\] = /usr/local/bin:/usr/bin:/bin|" "$PHP_CONF"
|
||||
sed -i "s|.*env\[TMP\].*|env\[TMP\] = /tmp|" "$PHP_CONF"
|
||||
sed -i "s|.*env\[TMPDIR\].*|env\[TMPDIR\] = /tmp|" "$PHP_CONF"
|
||||
sed -i "s|.*env\[TEMP\].*|env\[TEMP\] = /tmp|" "$PHP_CONF"
|
||||
sed -i "s|;clear_env = no|clear_env = no|" "$PHP_CONF"
|
||||
|
||||
echo "
|
||||
Tunning PHP.ini...
|
||||
"
|
||||
# Change values in php.ini (increase max file size)
|
||||
# max_execution_time
|
||||
sed -i "s|max_execution_time =.*|max_execution_time = 3500|g" "$PHP_INI"
|
||||
# max_input_time
|
||||
sed -i "s|max_input_time =.*|max_input_time = 3600|g" "$PHP_INI"
|
||||
# memory_limit
|
||||
sed -i "s|memory_limit =.*|memory_limit = 512M|g" "$PHP_INI"
|
||||
# post_max
|
||||
sed -i "s|post_max_size =.*|post_max_size = 1025M|g" "$PHP_INI"
|
||||
# upload_max
|
||||
sed -i "s|upload_max_filesize =.*|upload_max_filesize = 1024M|g" "$PHP_INI"
|
||||
|
||||
phpenmod opcache
|
||||
{
|
||||
|
||||
echo "# OPcache settings for Nextcloud"
|
||||
echo "opcache.enable=1"
|
||||
echo "opcache.enable_cli=1"
|
||||
echo "opcache.interned_strings_buffer=8"
|
||||
echo "opcache.max_accelerated_files=10000"
|
||||
echo "opcache.memory_consumption=256"
|
||||
echo "opcache.save_comments=1"
|
||||
echo "opcache.revalidate_freq=1"
|
||||
echo "opcache.validate_timestamps=1"
|
||||
} >> "$PHP_INI"
|
||||
|
||||
update-alternatives --set php /usr/bin/php"$STABLE_PHP"
|
||||
update-alternatives --set php-fpm.sock /run/php/php"$STABLE_PHP"-fpm.sock
|
||||
update-alternatives --set php-cgi /usr/bin/php-cgi"$STABLE_PHP"
|
||||
update-alternatives --set php-cgi-bin /usr/lib/cgi-bin/php"$STABLE_PHP"
|
||||
update-alternatives --set phar /usr/bin/phar"$STABLE_PHP"
|
||||
update-alternatives --set phar.phar /usr/bin/phar.phar"$STABLE_PHP"
|
||||
|
||||
systemctl restart php"$PHPVER"-fpm.service
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
#Start over
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
#!/bin/bash
|
||||
# Simple Jibri Env tester
|
||||
# SwITNet Ltd © - 2022, https://switnet.net/
|
||||
# SwITNet Ltd © - 2024, https://switnet.net/
|
||||
# GNU GPLv3 or later.
|
||||
|
||||
while getopts m: option
|
||||
|
@ -191,18 +191,18 @@ if [ -f "${CONF_JSON}"_disabled ] && \
|
|||
[ -f "$JIBRI_CONF" ] && \
|
||||
[ -f "$JIBRI_CONF"-dpkg-file ]; then
|
||||
echo -e "\n> This jibri config has been upgraded already. \xE2\x9C\x94 \n\nIf you think there maybe an error on checking you current jibri configuration.\nPlease report this to \
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
T6=1
|
||||
elif [ ! -f "$CONF_JSON" ] && \
|
||||
[ -f "$JIBRI_CONF" ] && \
|
||||
[ -f "${JIBRI_CONF}"-dpkg-file ]; then
|
||||
echo -e "\n> This jibri seems to be running the latest configuration already. \xE2\x9C\x94 \n\nIf you think there maybe an error on checking you current jibri configuration.\nPlease report this to \
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
T6=1
|
||||
elif [ -f "${CONF_JSON}" ] && \
|
||||
[ -f "$JIBRI_CONF" ]; then
|
||||
echo -e "\n> This jibri config seems to be candidate for upgrading. \xE2\x9C\x96 \nIf you think there maybe an error on checking you current jibri configuration.\nPlease report this to \
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
T6=0
|
||||
fi
|
||||
|
||||
|
@ -210,11 +210,11 @@ fi
|
|||
echo -e "\n#6.1 -- Check for specific Chrome flag --\n"
|
||||
if [ "$(grep -c "ignore-certificate-errors" $JIBRI_CONF)" != 0 ]; then
|
||||
echo -e "\n> Seems you have the \"--ignore-certificate-errors\" flag required for Chrome v88 and later. \xE2\x9C\x94 \n\nIf you think there maybe an error on checking you current jibri configuration.\nPlease report this to \
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
T6_1="0.1"
|
||||
else
|
||||
echo -e "\n> The jibri config may be missing the required chrome flags. \xE2\x9C\x96 \nPlease check:\n https://github.com/switnet-ltd/quick-jibri-installer/blob/master/quick_jibri_installer.sh#L820 \n\nIf you think there maybe an error on checking you current jibri configuration.\nPlease report this to \
|
||||
https://github.com/switnet-ltd/quick-jibri-installer/issues\n"
|
||||
echo -e "\n> The jibri config may be missing the required chrome flags. \xE2\x9C\x96 \nPlease check:\n https://forge.switnet.net/switnet/quick-jibri-installer/src/branch/master/quick_jibri_installer.sh#L870 \n\nIf you think there maybe an error on checking you current jibri configuration.\nPlease report this to \
|
||||
https://forge.switnet.net/switnet/quick-jibri-installer/issues\n"
|
||||
T6_1=0
|
||||
fi
|
||||
|
||||
|
|
Loading…
Reference in New Issue