Add STUN/TURN support

README.md

@@ -259,6 +259,8 @@ Variable | Description | Default value
 `JVB_TCP_PORT` | TCP port for media used by Jitsi Videobridge when the TCP Harvester is enabled | 4443
 `JVB_BREWERY_MUC` | MUC name for the JVB pool | jvbbrewery
 `JVB_ENABLE_APIS` | Comma separated list of JVB APIs to enable | none
+`JVB_ENABLE_STUN_TURN` | Enable STUN/TURN for JVB connections | 1
+`JVB_ENABLE_P2P_STUN_TURN` | Enable STUN/TURN for peer-to-peer connections | 1
 `JIGASI_XMPP_USER` | XMPP user for Jigasi MUC client connections | jigasi
 `JIGASI_XMPP_PASSWORD` | XMPP password for Jigasi MUC client connections | passw0rd
 `JIGASI_BREWERY_MUC` | MUC name for the Jigasi pool | jigasibrewery

docker-compose.yml

@@ -17,6 +17,8 @@ services:
  - ENABLE_LETSENCRYPT
  - ENABLE_HTTP_REDIRECT
  - ENABLE_TRANSCRIPTIONS
+ - JVB_ENABLE_STUN_TURN
+ - JVB_ENABLE_P2P_STUN_TURN
  - DISABLE_HTTPS
  - JICOFO_AUTH_USER
  - LETSENCRYPT_DOMAIN

env.example

@@ -192,6 +192,12 @@ JVB_TCP_PORT=4443
 # See https://github.com/jitsi/jitsi-videobridge/blob/master/doc/rest.md for more information
 #JVB_ENABLE_APIS=rest,colibri
 
+# Enable STUN/TURN for JVB connections
+#JVB_ENABLE_STUN_TURN=1
+
+# Enable STUN/TURN for peer-to-peer connections
+#JVB_ENABLE_P2P_STUN_TURN=1
+
 # XMPP component password for Jicofo.
 JICOFO_COMPONENT_SECRET=s3cr37
 

prosody/Dockerfile

@@ -34,6 +34,9 @@ RUN \
  && apt-dpkg-wrap apt-get -d install -y jitsi-meet-tokens \
  && dpkg -x /var/cache/apt/archives/jitsi-meet-tokens*.deb /tmp \
  && mv /tmp/usr/share/jitsi-meet/prosody-plugins /prosody-plugins \
+ && wget \
+ -O /usr/lib/prosody/modules/mod_turncredentials.lua \
+ https://hg.prosody.im/prosody-modules/raw-file/tip/mod_turncredentials/mod_turncredentials.lua \
  && apt-cleanup \
  && rm -rf /tmp/usr /var/cache/apt
 

web/rootfs/defaults/config.js

@@ -227,7 +227,7 @@ var config = {
  // minParticipants: 2,
 
  // Use XEP-0215 to fetch STUN and TURN servers.
- // useStunTurn: true,
+ // useStunTurn: true, //jvb
 
  // Enable IPv6 support.
  // useIPv6: true,
@@ -329,7 +329,7 @@ var config = {
  enabled: true,
 
  // Use XEP-0215 to fetch STUN and TURN servers.
- // useStunTurn: true,
+ // useStunTurn: true, //p2p
 
  // The STUN servers that will be used in the peer to peer connections
  stunServers: [

web/rootfs/etc/cont-init.d/10-config

@@ -84,6 +84,18 @@ if [[ ! -f /config/config.js ]]; then
  -e "s#// transcribingEnabled:.*#transcribingEnabled: true,#" \
  /config/config.js
  fi
+
+ if [[ $JVB_ENABLE_STUN_TURN -eq 1 || "$JVB_ENABLE_STUN_TURN" == "true" ]]; then
+ sed -i \
+ -e "s#// useStunTurn:.*, //jvb#useStunTurn: true, //jvb#" \
+ /config/config.js
+ fi
+
+ if [[ $JVB_ENABLE_P2P_STUN_TURN -eq 1 || "$JVB_ENABLE_P2P_STUN_TURN" == "true" ]]; then
+ sed -i \
+ -e "s#// useStunTurn:.*, //p2p#useStunTurn: true, //p2p#" \
+ /config/config.js
+ fi
 fi
 
 if [[ ! -f /config/interface_config.js ]]; then