strukturag / spreed-webrtc

WebRTC audio/video call and conferencing server.
GNU Affero General Public License v3.0
1.09k stars 259 forks source link

Please advise config file for the mattermost webrtc setup #421

Open vsh77 opened 7 years ago

vsh77 commented 7 years ago

Hi, Please advise config file for the mattermost setup. Mattermost wants:

Gateway WebSocket URL: wss://spreed.mydomain.com:8189

Enter wss://:. Make sure you use WS or WSS in your URL depending on your server configuration. This is the WebSocket used to signal and establish communication between the peers.

Gateway Admin URL: https://spreed.mydomain.com/main

Enter https://:/admin. Make sure you use HTTP or HTTPS in your URL depending on your server configuration. Mattermost WebRTC uses this URL to obtain valid tokens for each peer to establish the connection.

Gateway Admin Secret: the-default-secret-do-not-keep-me

Spreed installed without Docker:

sudo apt-add-repository ppa:strukturag/spreed-webrtc sudo apt update sudo apt install spreed-webrtc sudo systemctl enable spreed-webrtc

lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 16.04.2 LTS Release: 16.04 Codename: xenial

vsh77 commented 7 years ago

my nginx config:

server { listen 80 default_server; server_name spreed.mydomain.com; return 301 https://$server_name$request_uri; } server { listen 443 ssl http2; server_name spreed.mydomain.com; ssl on; ssl_certificate /etc/letsencrypt/live/spreed.mydomain.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/spreed.mydomain.com/privkey.pem; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; location / { proxy_pass http://127.0.0.1:8080; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering on; proxy_ignore_client_abort off; proxy_redirect off; proxy_connect_timeout 90; proxy_send_timeout 90; proxy_read_timeout 90; proxy_buffer_size 4k; proxy_buffers 4 32k; proxy_busy_buffers_size 64k; proxy_temp_file_write_size 64k; proxy_next_upstream error timeout invalid_header http_502 http_503 http_504; } location ~ /.well-known/acme-challenge { root /usr/share/nginx/spreed/; allow all; } }

vsh77 commented 7 years ago

non commented lines of the spreed config:

[http] listen = 127.0.0.1:8080 root = /usr/share/spreed-webrtc-server/www

[app] sessionSecret = 000the-default-secret-do-not-keep-me encryptionSecret = tne-default-encryption-block-key serverToken = i-did-not-change-the-public-token-boo serverRealm = local default-src 'self'; frame-src 'self' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self' wss://127.0.0.1:8189/ws blob:; font-src 'self' data: blob:; media-src 'self' blob:;

[log] logfile = /var/log/spreed-webrtc-server.log

[users] enabled = false