yamllint
This commit is contained in:
@@ -1,7 +1,8 @@
|
|||||||
---
|
---
|
||||||
- name: Désactivation du test d'écho effectué lors de l'accès à la room
|
- name: Désactivation du test d'écho effectué lors de l'accès à la room
|
||||||
lineinfile:
|
lineinfile:
|
||||||
path: /usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml
|
path:
|
||||||
|
/usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml
|
||||||
regexp: ' skipCheck: false'
|
regexp: ' skipCheck: false'
|
||||||
line: ' skipCheck: true'
|
line: ' skipCheck: true'
|
||||||
notify:
|
notify:
|
||||||
|
|||||||
@@ -29,16 +29,19 @@
|
|||||||
lineinfile:
|
lineinfile:
|
||||||
path: /usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties
|
path: /usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties
|
||||||
regexp: "defaultWelcomeMessageFooter="
|
regexp: "defaultWelcomeMessageFooter="
|
||||||
line:
|
line: >
|
||||||
"defaultWelcomeMessageFooter=Pour rejoindre la conférence par téléphone,
|
"defaultWelcomeMessageFooter=Pour rejoindre la conférence par
|
||||||
appeler au numéro :<br> %%DIALNUM%%<br> puis saisir le code :<br> %%CONFNUM%%"
|
téléphone, appeler au numéro :<br> %%DIALNUM%%<br>
|
||||||
|
puis saisir le code :<br> %%CONFNUM%%"
|
||||||
notify:
|
notify:
|
||||||
- restart bigbluebutton
|
- restart bigbluebutton
|
||||||
|
|
||||||
- name: Changement du message d'accueil audio
|
- name: Changement du message d'accueil audio
|
||||||
copy:
|
copy:
|
||||||
src: "{{ inventory_hostname }}/bbb-sounds/{{ item }}/conf-pin.wav"
|
src: "{{ inventory_hostname }}/bbb-sounds/{{ item }}/conf-pin.wav"
|
||||||
dest: "/opt/freeswitch/share/freeswitch/sounds/en/us/callie/conference/{{ item }}/"
|
dest:
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
|
"/opt/freeswitch/share/freeswitch/sounds/en/us/callie/conference/{{ item }}/"
|
||||||
owner: freeswitch
|
owner: freeswitch
|
||||||
group: daemon
|
group: daemon
|
||||||
mode: u=rw,g=r,o=r
|
mode: u=rw,g=r,o=r
|
||||||
|
|||||||
@@ -19,7 +19,9 @@
|
|||||||
|
|
||||||
- name: Récup du hostname actuellement configuré
|
- name: Récup du hostname actuellement configuré
|
||||||
set_fact:
|
set_fact:
|
||||||
oldHostname: "{{ lookup('ini', 'bigbluebutton.web.serverURL type=properties file=/tmp/bigbluebutton.properties') | urlsplit('hostname') }}"
|
oldHostname:
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
|
"{{ lookup('ini', 'bigbluebutton.web.serverURL type=properties file=/tmp/bigbluebutton.properties') | urlsplit('hostname') }}"
|
||||||
|
|
||||||
- name: execution de la commande bigbluebutton qui set le nouveau nom de domaine
|
- name: execution de la commande bigbluebutton qui set le nouveau nom de domaine
|
||||||
command: "bbb-conf --setip {{ bbbHostname }}"
|
command: "bbb-conf --setip {{ bbbHostname }}"
|
||||||
@@ -56,7 +58,9 @@
|
|||||||
when: not ssl_file.stat.exists
|
when: not ssl_file.stat.exists
|
||||||
|
|
||||||
- name: Certif LE
|
- name: Certif LE
|
||||||
command: certbot --webroot -w /var/www/bigbluebutton-default/ -d {{ bbbHostname }} certonly
|
command:
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
|
certbot --webroot -w /var/www/bigbluebutton-default/ -d {{ bbbHostname }} certonly
|
||||||
when: not ssl_file.stat.exists
|
when: not ssl_file.stat.exists
|
||||||
|
|
||||||
- name: Suppression de la conf temporaire LE
|
- name: Suppression de la conf temporaire LE
|
||||||
|
|||||||
@@ -1,9 +1,9 @@
|
|||||||
---
|
---
|
||||||
- name: Ajout du compte SIP
|
- name: Ajout du compte SIP
|
||||||
debconf:
|
debconf:
|
||||||
name: jigasi
|
name: jigasi
|
||||||
question: jigasi/sip-account
|
question: jigasi/sip-account
|
||||||
value: '{{ jigasi_sip_account }}'
|
value: '{{ jigasi_sip_account }}'
|
||||||
vtype: string
|
vtype: string
|
||||||
|
|
||||||
- name: Ajout du mot de passe SIP
|
- name: Ajout du mot de passe SIP
|
||||||
@@ -22,4 +22,6 @@
|
|||||||
lineinfile:
|
lineinfile:
|
||||||
path: /etc/jitsi/jigasi/sip-communicator.properties
|
path: /etc/jitsi/jigasi/sip-communicator.properties
|
||||||
regexp: "org.jitsi.jigasi.DEFAULT_JVB_ROOM_NAME="
|
regexp: "org.jitsi.jigasi.DEFAULT_JVB_ROOM_NAME="
|
||||||
line: "org.jitsi.jigasi.DEFAULT_JVB_ROOM_NAME={{ jigasi_sip_room }}@conference.{{ inventory_hostname }}"
|
line:
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
|
"org.jitsi.jigasi.DEFAULT_JVB_ROOM_NAME={{ jigasi_sip_room }}@conference.{{ inventory_hostname }}"
|
||||||
|
|||||||
@@ -9,7 +9,7 @@
|
|||||||
- restart jitsi-videobridge2
|
- restart jitsi-videobridge2
|
||||||
- restart jicofo
|
- restart jicofo
|
||||||
|
|
||||||
- name: Conf Jitsi - Activation de l'authentification prosody 2/2
|
- name: Conf Jitsi - Activation de l'authentification prosody 2/2
|
||||||
blockinfile:
|
blockinfile:
|
||||||
path: /etc/prosody/conf.d/{{ inventory_hostname }}.cfg.lua
|
path: /etc/prosody/conf.d/{{ inventory_hostname }}.cfg.lua
|
||||||
marker: "-- {mark} ANSIBLE MANAGED BLOCK"
|
marker: "-- {mark} ANSIBLE MANAGED BLOCK"
|
||||||
@@ -43,7 +43,8 @@
|
|||||||
- restart jicofo
|
- restart jicofo
|
||||||
|
|
||||||
- name: Conf Jitsi - Création de l'utilisateur prosody
|
- name: Conf Jitsi - Création de l'utilisateur prosody
|
||||||
command: prosodyctl register {{ jitsi_user }} {{ inventory_hostname }} {{ jitsi_pass }}
|
command:
|
||||||
|
prosodyctl register {{jitsi_user}} {{inventory_hostname}} {{jitsi_pass}}
|
||||||
notify:
|
notify:
|
||||||
- restart prosody
|
- restart prosody
|
||||||
- restart jitsi-videobridge2
|
- restart jitsi-videobridge2
|
||||||
|
|||||||
@@ -23,7 +23,8 @@
|
|||||||
- ['port = 5349', 'port = 443']
|
- ['port = 5349', 'port = 443']
|
||||||
notify: restart prosody
|
notify: restart prosody
|
||||||
|
|
||||||
- name: indique a jitsi les règles d'échange des credentials pour le coturn externe
|
- name: indique a jitsi les règles d'échange des credentials
|
||||||
|
pour le coturn externe
|
||||||
blockinfile:
|
blockinfile:
|
||||||
path: /etc/prosody/conf.d/{{ inventory_hostname }}.cfg.lua
|
path: /etc/prosody/conf.d/{{ inventory_hostname }}.cfg.lua
|
||||||
marker: "-- {mark} ANSIBLE MANAGED BLOCK"
|
marker: "-- {mark} ANSIBLE MANAGED BLOCK"
|
||||||
|
|||||||
@@ -20,16 +20,20 @@
|
|||||||
- restart prosody
|
- restart prosody
|
||||||
|
|
||||||
- name: utilisateur jibri pour prosody (auth)
|
- name: utilisateur jibri pour prosody (auth)
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
command: prosodyctl register {{ item.user }} auth.{{ inventory_hostname }} {{ item.password }}
|
command: prosodyctl register {{ item.user }} auth.{{ inventory_hostname }} {{ item.password }}
|
||||||
args:
|
args:
|
||||||
# Prosody remplace les points par des '%2e' dans le chemin du fichier
|
# Prosody remplace les points par des '%2e' dans le chemin du fichier
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
creates: /var/lib/prosody/{{ 'auth%2e'+inventory_hostname | replace('.', '%2e') }}/accounts/{{ item.user }}.dat
|
creates: /var/lib/prosody/{{ 'auth%2e'+inventory_hostname | replace('.', '%2e') }}/accounts/{{ item.user }}.dat
|
||||||
loop: "{{ jibri_users }}"
|
loop: "{{ jibri_users }}"
|
||||||
|
|
||||||
- name: utilisateur jibri pour prosody (recorder)
|
- name: utilisateur jibri pour prosody (recorder)
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
command: prosodyctl register {{ item.user }}-record recorder.{{ inventory_hostname }} {{ item.password }}
|
command: prosodyctl register {{ item.user }}-record recorder.{{ inventory_hostname }} {{ item.password }}
|
||||||
args:
|
args:
|
||||||
# Prosody remplace les points par des '%2e' dans le chemin du fichier
|
# Prosody remplace les points par des '%2e' dans le chemin du fichier
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
creates: /var/lib/prosody/{{ 'auth%2e'+inventory_hostname | replace('.', '%2e') }}/accounts/{{ item.user }}.dat
|
creates: /var/lib/prosody/{{ 'auth%2e'+inventory_hostname | replace('.', '%2e') }}/accounts/{{ item.user }}.dat
|
||||||
loop: "{{ jibri_users }}"
|
loop: "{{ jibri_users }}"
|
||||||
|
|
||||||
|
|||||||
@@ -7,7 +7,8 @@
|
|||||||
regexp: "^org.jitsi.videobridge.ENABLE_STATISTICS"
|
regexp: "^org.jitsi.videobridge.ENABLE_STATISTICS"
|
||||||
line: "org.jitsi.videobridge.ENABLE_STATISTICS=true"
|
line: "org.jitsi.videobridge.ENABLE_STATISTICS=true"
|
||||||
|
|
||||||
- name: configuration du videobridge pour transporter les stats via colibri REST api
|
- name: configuration du videobridge pour transporter les stats
|
||||||
|
via colibri REST api
|
||||||
lineinfile:
|
lineinfile:
|
||||||
path: "/etc/jitsi/videobridge/sip-communicator.properties"
|
path: "/etc/jitsi/videobridge/sip-communicator.properties"
|
||||||
regexp: "^org.jitsi.videobridge.STATISTICS_TRANSPORT"
|
regexp: "^org.jitsi.videobridge.STATISTICS_TRANSPORT"
|
||||||
|
|||||||
@@ -3,7 +3,9 @@
|
|||||||
replace:
|
replace:
|
||||||
path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
|
path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
|
||||||
regexp: '[^?]{{ inventory_hostname }}/http-bind'
|
regexp: '[^?]{{ inventory_hostname }}/http-bind'
|
||||||
replace: '<!--# echo var="http_host" -->/<!--# echo var="subdir" default="" -->http-bind'
|
replace: >
|
||||||
|
'<!--# echo var="http_host" -->/<!--#
|
||||||
|
echo var="subdir" default="" -->http-bind'
|
||||||
notify:
|
notify:
|
||||||
- restart jitsi-videobridge2
|
- restart jitsi-videobridge2
|
||||||
- restart nginx
|
- restart nginx
|
||||||
|
|||||||
@@ -24,7 +24,8 @@
|
|||||||
regexp: '[^?]\$http_host'
|
regexp: '[^?]\$http_host'
|
||||||
replace: ' {{ inventory_hostname }}'
|
replace: ' {{ inventory_hostname }}'
|
||||||
|
|
||||||
- name: Conf Jitsi MultiDomain - suppression du paramètre server_names_hash_bucket_size car génère une erreur si en doublon
|
- name: Conf Jitsi MultiDomain - suppression du paramètre
|
||||||
|
server_names_hash_bucket_size car génère une erreur si en doublon
|
||||||
lineinfile:
|
lineinfile:
|
||||||
path: /etc/nginx/sites-available/{{ hostname }}.conf
|
path: /etc/nginx/sites-available/{{ hostname }}.conf
|
||||||
state: absent
|
state: absent
|
||||||
|
|||||||
@@ -12,23 +12,30 @@
|
|||||||
remote_src: true
|
remote_src: true
|
||||||
when: not ssl_file.stat.exists
|
when: not ssl_file.stat.exists
|
||||||
|
|
||||||
- name: Conf SSL MultiDomain - rend le nom de domaine paramétrable dans le script certbot de jitsi
|
- name: Conf SSL MultiDomain - rend le nom de domaine paramétrable dans le
|
||||||
|
script certbot de jitsi
|
||||||
replace:
|
replace:
|
||||||
path: /usr/share/jitsi-meet/scripts/install-letsencrypt-cert-with-param.sh
|
path: /usr/share/jitsi-meet/scripts/install-letsencrypt-cert-with-param.sh
|
||||||
regexp: '^DOMAIN="\${DEB_CONF_RESULT##\*:}"'
|
regexp: '^DOMAIN="\${DEB_CONF_RESULT##\*:}"'
|
||||||
replace: "DOMAIN=$1"
|
replace: "DOMAIN=$1"
|
||||||
|
|
||||||
- name: Conf SSL MultiDomain - Exécution du script lets encrypt
|
- name: Conf SSL MultiDomain - Exécution du script lets encrypt
|
||||||
command: "/usr/share/jitsi-meet/scripts/install-letsencrypt-cert-with-param.sh {{ item }}"
|
command:
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
|
"/usr/share/jitsi-meet/scripts/install-letsencrypt-cert-with-param.sh {{ item }}"
|
||||||
args:
|
args:
|
||||||
creates: /etc/letsencrypt/live/{{ item }}/fullchain.pem # Execute le script que si ce fichier n'existe pas
|
creates:
|
||||||
|
/etc/letsencrypt/live/{{ item }}/fullchain.pem
|
||||||
|
# Execute le script que si ce fichier n'existe pas
|
||||||
loop: "{{ jitsi_multidomain_domain }}"
|
loop: "{{ jitsi_multidomain_domain }}"
|
||||||
|
|
||||||
- name: Conf Jitsi MultiDomain - Change le ServerName des conf nginx
|
- name: Conf Jitsi MultiDomain - Change le ServerName des conf nginx
|
||||||
replace:
|
replace:
|
||||||
path: /etc/nginx/sites-available/{{ item }}.conf
|
path: /etc/nginx/sites-available/{{ item }}.conf
|
||||||
regexp: "[^?]ssl_certificate /etc/letsencrypt/live/{{ inventory_hostname }}.*$"
|
regexp:
|
||||||
replace: "ssl_certificate /etc/letsencrypt/live/{{ item }}/fullchain.pem;"
|
"[^?]ssl_certificate /etc/letsencrypt/live/{{ inventory_hostname }}.*$"
|
||||||
|
replace:
|
||||||
|
"ssl_certificate /etc/letsencrypt/live/{{ item }}/fullchain.pem;"
|
||||||
loop: "{{ jitsi_multidomain_domain }}"
|
loop: "{{ jitsi_multidomain_domain }}"
|
||||||
notify:
|
notify:
|
||||||
- restart nginx
|
- restart nginx
|
||||||
@@ -36,8 +43,10 @@
|
|||||||
- name: Conf Jitsi MultiDomain - Change le ServerName des conf nginx
|
- name: Conf Jitsi MultiDomain - Change le ServerName des conf nginx
|
||||||
replace:
|
replace:
|
||||||
path: /etc/nginx/sites-available/{{ item }}.conf
|
path: /etc/nginx/sites-available/{{ item }}.conf
|
||||||
regexp: "[^?]ssl_certificate_key /etc/letsencrypt/live/{{ inventory_hostname }}.*$"
|
regexp:
|
||||||
replace: "ssl_certificate_key /etc/letsencrypt/live/{{ item }}/privkey.pem;"
|
"[^?]ssl_certificate_key /etc/letsencrypt/live/{{inventory_hostname}}.*$"
|
||||||
|
replace:
|
||||||
|
"ssl_certificate_key /etc/letsencrypt/live/{{ item }}/privkey.pem;"
|
||||||
loop: "{{ jitsi_multidomain_domain }}"
|
loop: "{{ jitsi_multidomain_domain }}"
|
||||||
notify:
|
notify:
|
||||||
- restart nginx
|
- restart nginx
|
||||||
|
|||||||
@@ -82,5 +82,5 @@
|
|||||||
regexp: '{{ item[0] }}'
|
regexp: '{{ item[0] }}'
|
||||||
line: '{{ item[1] }}'
|
line: '{{ item[1] }}'
|
||||||
loop:
|
loop:
|
||||||
- ['DEFAULT_LOGO_URL: ', " DEFAULT_LOGO_URL: 'images/visio.imio.be.svg',"]
|
- ['DEFAULT_LOGO_URL: ', " DEFAULT_LOGO_URL: 'images/visio.imio.be.svg',"]
|
||||||
- ['JITSI_WATERMARK_LINK: ', " JITSI_WATERMARK_LINK: 'https://imio.be',"]
|
- ['JITSI_WATERMARK_LINK: ', " JITSI_WATERMARK_LINK: 'https://imio.be',"]
|
||||||
|
|||||||
@@ -22,6 +22,9 @@
|
|||||||
line: '{{ item[1] }}'
|
line: '{{ item[1] }}'
|
||||||
loop:
|
loop:
|
||||||
- ['APP_NAME: ', " APP_NAME: 'Komuniki',"]
|
- ['APP_NAME: ', " APP_NAME: 'Komuniki',"]
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
- ['DEFAULT_LOGO_URL: ', " DEFAULT_LOGO_URL: 'images/logo-komuniki.svg',"]
|
- ['DEFAULT_LOGO_URL: ', " DEFAULT_LOGO_URL: 'images/logo-komuniki.svg',"]
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
- ['DEFAULT_WELCOME_PAGE_LOGO_URL: ', " DEFAULT_WELCOME_PAGE_LOGO_URL: 'images/logo-komuniki-txt.svg',"]
|
- ['DEFAULT_WELCOME_PAGE_LOGO_URL: ', " DEFAULT_WELCOME_PAGE_LOGO_URL: 'images/logo-komuniki-txt.svg',"]
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
- ['JITSI_WATERMARK_LINK: ', " JITSI_WATERMARK_LINK: 'https://komuniki.fr',"]
|
- ['JITSI_WATERMARK_LINK: ', " JITSI_WATERMARK_LINK: 'https://komuniki.fr',"]
|
||||||
|
|||||||
@@ -10,6 +10,7 @@
|
|||||||
state: present
|
state: present
|
||||||
|
|
||||||
- name: Mise en place des règle firewall tcp et udp
|
- name: Mise en place des règle firewall tcp et udp
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
# source : https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart#setup-and-configure-your-firewall
|
# source : https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart#setup-and-configure-your-firewall
|
||||||
ufw:
|
ufw:
|
||||||
state: enabled
|
state: enabled
|
||||||
@@ -26,6 +27,7 @@
|
|||||||
- ['5349', 'tcp']
|
- ['5349', 'tcp']
|
||||||
- ['5222', 'tcp'] # XMPP port for recorder
|
- ['5222', 'tcp'] # XMPP port for recorder
|
||||||
|
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
- name: Import de la clé GPG # source: https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart#add-the-jitsi-package-repository
|
- name: Import de la clé GPG # source: https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart#add-the-jitsi-package-repository
|
||||||
apt_key:
|
apt_key:
|
||||||
id: FFD65A0DA2BEBDEB73D44C8BB4D2D216F1FD7806
|
id: FFD65A0DA2BEBDEB73D44C8BB4D2D216F1FD7806
|
||||||
@@ -34,6 +36,7 @@
|
|||||||
|
|
||||||
- name: Ajout du depot jitsi
|
- name: Ajout du depot jitsi
|
||||||
apt_repository:
|
apt_repository:
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
repo: deb [signed-by=/etc/apt/trusted.gpg.d/jitsi.gpg] https://download.jitsi.org stable/
|
repo: deb [signed-by=/etc/apt/trusted.gpg.d/jitsi.gpg] https://download.jitsi.org stable/
|
||||||
update_cache: true
|
update_cache: true
|
||||||
|
|
||||||
@@ -48,7 +51,9 @@
|
|||||||
debconf:
|
debconf:
|
||||||
name: jitsi-meet-web-config
|
name: jitsi-meet-web-config
|
||||||
question: jitsi-meet/cert-choice
|
question: jitsi-meet/cert-choice
|
||||||
value: "Generate a new self-signed certificate (You will later get a chance to obtain a Let's encrypt certificate)"
|
value: >
|
||||||
|
"Generate a new self-signed certificate (You will later get a chance to
|
||||||
|
obtain a Let's encrypt certificate)"
|
||||||
vtype: string
|
vtype: string
|
||||||
|
|
||||||
- name: installation de jitsi
|
- name: installation de jitsi
|
||||||
@@ -65,8 +70,10 @@
|
|||||||
|
|
||||||
- name: Exécution du script lets encrypt
|
- name: Exécution du script lets encrypt
|
||||||
shell:
|
shell:
|
||||||
cmd: /usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh >> jitsi-le.log
|
cmd:
|
||||||
creates: /etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem # Execute le script que si ce fichier n'existe pas
|
/usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh >> jitsi-le.log
|
||||||
|
creates: /etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem
|
||||||
|
# Execute le script que si ce fichier n'existe pas
|
||||||
|
|
||||||
- name: Ajout d'un memo pour suprimer manuellement Jitsi
|
- name: Ajout d'un memo pour suprimer manuellement Jitsi
|
||||||
copy:
|
copy:
|
||||||
|
|||||||
Reference in New Issue
Block a user