mirror of
https://github.com/nextcloud/all-in-one.git
synced 2025-10-30 02:27:24 +08:00
89 lines
2 KiB
Bash
89 lines
2 KiB
Bash
#!/bin/bash
|
|
|
|
# Variables
|
|
if [ -z "$NC_DOMAIN" ]; then
|
|
echo "You need to provide the NC_DOMAIN."
|
|
exit 1
|
|
elif [ -z "$TALK_PORT" ]; then
|
|
echo "You need to provide the TALK_PORT."
|
|
exit 1
|
|
elif [ -z "$TURN_SECRET" ]; then
|
|
echo "You need to provide the TURN_SECRET."
|
|
exit 1
|
|
elif [ -z "$SIGNALING_SECRET" ]; then
|
|
echo "You need to provide the SIGNALING_SECRET."
|
|
exit 1
|
|
elif [ -z "$INTERNAL_SECRET" ]; then
|
|
echo "You need to provide the INTERNAL_SECRET."
|
|
exit 1
|
|
fi
|
|
|
|
set -x
|
|
IPv4_ADDRESS_TALK="$(dig nextcloud-aio-talk IN A +short | grep '^[0-9.]\+$' | sort | head -n1)"
|
|
IPv6_ADDRESS_TALK="$(dig nextcloud-aio-talk AAAA +short | grep '^[0-9a-f:]\+$' | sort | head -n1)"
|
|
|
|
IPv4_ADDRESS_NC="$(dig "$NC_DOMAIN" IN A +short +https +tls-ca=/etc/ssl/certs/ca-certificates.crt @1.1.1.1 | grep '^[0-9.]\+$' | sort | head -n1)"
|
|
IPv6_ADDRESS_NC="$(dig "$NC_DOMAIN" IN AAAA +short +https +tls-ca=/etc/ssl/certs/ca-certificates.crt @1.1.1.1 | grep '^[0-9a-f:]\+$' | sort | head -n1)"
|
|
set +x
|
|
|
|
# Turn
|
|
cat << TURN_CONF > "/conf/eturnal.yml"
|
|
eturnal:
|
|
listen:
|
|
- ip: "::"
|
|
port: $TALK_PORT
|
|
transport: udp
|
|
- ip: "::"
|
|
port: $TALK_PORT
|
|
transport: tcp
|
|
log_dir: stdout
|
|
log_level: warning
|
|
secret: "$TURN_SECRET"
|
|
relay_ipv4_addr: "$IPv4_ADDRESS_NC"
|
|
relay_ipv6_addr: "$IPv6_ADDRESS_NC"
|
|
blacklist:
|
|
- recommended
|
|
whitelist:
|
|
- 127.0.0.1
|
|
- ::1
|
|
- "$IPv4_ADDRESS_TALK"
|
|
- "$IPv6_ADDRESS_TALK"
|
|
TURN_CONF
|
|
|
|
# Remove empty lines so that the config is not invalid
|
|
sed -i '/""/d' /conf/eturnal.yml
|
|
|
|
# Signling
|
|
cat << SIGNALING_CONF > "/conf/signaling.conf"
|
|
[http]
|
|
listen = 0.0.0.0:8081
|
|
|
|
[app]
|
|
debug = false
|
|
|
|
[sessions]
|
|
hashkey = $(openssl rand -hex 16)
|
|
blockkey = $(openssl rand -hex 16)
|
|
|
|
[clients]
|
|
internalsecret = ${INTERNAL_SECRET}
|
|
|
|
[backend]
|
|
backends = backend-1
|
|
allowall = false
|
|
timeout = 10
|
|
connectionsperhost = 8
|
|
|
|
[backend-1]
|
|
url = https://${NC_DOMAIN}
|
|
secret = ${SIGNALING_SECRET}
|
|
|
|
[nats]
|
|
url = nats://127.0.0.1:4222
|
|
|
|
[mcu]
|
|
type = janus
|
|
url = ws://127.0.0.1:8188
|
|
SIGNALING_CONF
|
|
|
|
exec "$@"
|