From 2aa7479f614767c7d98934bb136c9c789bab7464 Mon Sep 17 00:00:00 2001
From: Ingolf Wagner <contact@ingolf-wagner.de>
Date: Tue, 19 Sep 2023 12:18:01 +0200
Subject: [PATCH] enabled jitsi

---
 nixos/machines/chungus/media-share.nix |  2 +-
 nixos/machines/robi/configuration.nix  |  2 +
 nixos/machines/robi/social-jitsi.nix   | 60 ++++++++++++++++++++++++++
 3 files changed, 63 insertions(+), 1 deletion(-)
 create mode 100644 nixos/machines/robi/social-jitsi.nix

diff --git a/nixos/machines/chungus/media-share.nix b/nixos/machines/chungus/media-share.nix
index 9576996..2686f1a 100644
--- a/nixos/machines/chungus/media-share.nix
+++ b/nixos/machines/chungus/media-share.nix
@@ -4,7 +4,7 @@
   # To set password:
   # nix-shell -p samba --run "smbpasswd -a media"
   custom.samba-share.enable = true;
-  custom.samba-share.enableWSDD = true;
+  #custom.samba-share.enableWSDD = true;
   custom.samba-share.folders = {
     music = "/media/music";
     audio-books = "/media/audio-books";
diff --git a/nixos/machines/robi/configuration.nix b/nixos/machines/robi/configuration.nix
index baa1f01..f72b16f 100644
--- a/nixos/machines/robi/configuration.nix
+++ b/nixos/machines/robi/configuration.nix
@@ -32,6 +32,8 @@
     ./wireguard.nix
     ./jellyfin.nix
 
+    ./social-jitsi.nix
+
     #./webhook-ring.nix
 
     #../../system/server
diff --git a/nixos/machines/robi/social-jitsi.nix b/nixos/machines/robi/social-jitsi.nix
new file mode 100644
index 0000000..fc308d2
--- /dev/null
+++ b/nixos/machines/robi/social-jitsi.nix
@@ -0,0 +1,60 @@
+{ config, ... }: {
+  #               +                                       +
+  #               |                                       |
+  #               |                                       |
+  #               v                                       v
+  #          80, 443 TCP                          443 TCP, 10000 UDP
+  #       +--------------+                     +---------------------+
+  #       |  nginx       |  5222, 5347 TCP     |                     |
+  #       |  jitsi-meet  |<-------------------+|  jitsi-videobridge  |
+  #       |  prosody     |         |           |                     |
+  #       |  jicofo      |         |           +---------------------+
+  #       +--------------+         |
+  #                                |           +---------------------+
+  #                                |           |                     |
+  #                                +----------+|  jitsi-videobridge  |
+  #                                |           |                     |
+  #                                |           +---------------------+
+  #                                |
+  #                                |           +---------------------+
+  #                                |           |                     |
+  #                                +----------+|  jitsi-videobridge  |
+  #                                            |                     |
+  #                                            +---------------------+
+
+  # This is a one server setup
+  services.jitsi-meet = {
+    enable = true;
+    hostName = "meet.ingolf-wagner.de";
+
+    # JItsi COnference FOcus is a server side focus component used in Jitsi Meet conferences.
+    # https://github.com/jitsi/jicofo
+    jicofo.enable = true;
+
+    # Whether to enable nginx virtual host that will serve the javascript application and act as a proxy for the XMPP server.
+    #  Further nginx configuration can be done by adapting services.nginx.virtualHosts.<hostName>. When this is enabled, ACME
+    #  will be used to retrieve a TLS certificate by default. To disable this, set the
+    #  services.nginx.virtualHosts.<hostName>.enableACME to false and if appropriate do the same for
+    #  services.nginx.virtualHosts.<hostName>.forceSSL.
+    nginx.enable = true;
+
+    # https://github.com/jitsi/jitsi-meet/blob/master/config.js
+    config = {
+      enableWelcomePage = false;
+      defaultLang = "en";
+    };
+
+    # https://github.com/jitsi/jitsi-meet/blob/master/interface_config.js
+    interfaceConfig = {
+      SHOW_JITSI_WATERMARK = false;
+      SHOW_WATERMARK_FOR_GUESTS = false;
+    };
+
+  };
+
+  networking.firewall = {
+    allowedTCPPorts = [ 80 443 ];
+    allowedUDPPorts = [ 10000 ];
+  };
+
+}