.gitlab-ci.yml

@@ -6,7 +6,7 @@ stages:
   - image
 
 .img: &img
-  image: "domaindrivenarchitecture/ddadevops-dind:4.11.3"
+  image: "domaindrivenarchitecture/ddadevops-dind:4.7.2"
   services:
     - docker:dind
   before_script:
@@ -16,7 +16,7 @@ stages:
   - export IMAGE_TAG=$CI_COMMIT_TAG
 
 .cljs-job: &cljs
-  image: "domaindrivenarchitecture/ddadevops-clj-cljs:4.11.3"
+  image: "domaindrivenarchitecture/ddadevops-clj-cljs:4.7.2"
   cache:
     key: ${CI_COMMIT_REF_SLUG}
     paths:
@@ -29,7 +29,7 @@ stages:
   - npm install
 
 .clj-job: &clj
-  image: "domaindrivenarchitecture/ddadevops-clj:4.11.3"
+  image: "domaindrivenarchitecture/ddadevops-clj-cljs:4.7.2"
   cache:
     key: ${CI_COMMIT_REF_SLUG}
     paths:
@@ -93,15 +93,6 @@ package-uberjar:
     paths:
       - target/uberjar
 
-package-native:
-  <<: *clj
-  stage: package
-  script:
-    - pyb package_native
-  artifacts:
-    paths:
-      - target/graalvm
-
 release-to-clojars:
   <<: *clj
   <<: *tag_only
@@ -122,3 +113,11 @@ jitsi-web-image-publish:
   stage: image
   script:
     - cd infrastructure/web && pyb image publish
+
+jitsi-excalidraw-backend-image-publish:
+  <<: *img
+  <<: *tag_only
+  stage: image
+  script:
+    - cd infrastructure/excalidraw-backend && pyb image publish
+

README.md

@@ -1,7 +1,7 @@
 # convention 4 kubernetes: c4k-jitsi
 [![Clojars Project](https://img.shields.io/clojars/v/org.domaindrivenarchitecture/c4k-jitsi.svg)](https://clojars.org/org.domaindrivenarchitecture/c4k-jitsi) [![pipeline status](https://gitlab.com/domaindrivenarchitecture/c4k-jitsi/badges/master/pipeline.svg)](https://gitlab.com/domaindrivenarchitecture/c4k-jitsi/-/commits/main) 
 
-[<img src="https://domaindrivenarchitecture.org/img/delta-chat.svg" width=20 alt="DeltaChat"> chat over e-mail](mailto:buero@meissa-gmbh.de?subject=community-chat) | [<img src="https://meissa.de/images/parts/contact/mastodon36_hue9b2464f10b18e134322af482b9c915e_5501_filter_14705073121015236177.png" width=20 alt="M"> meissa@social.meissa-gmbh.de](https://social.meissa-gmbh.de/@meissa) | [Blog](https://domaindrivenarchitecture.org) | [Website](https://meissa.de)
+[<img src="https://domaindrivenarchitecture.org/img/delta-chat.svg" width=20 alt="DeltaChat"> chat over e-mail](mailto:buero@meissa-gmbh.de?subject=community-chat) | [<img src="https://meissa-gmbh.de/img/community/Mastodon_Logotype.svg" width=20 alt="team@social.meissa-gmbh.de"> team@social.meissa-gmbh.de](https://social.meissa-gmbh.de/@team) | [Website & Blog](https://domaindrivenarchitecture.org)
 
 ## Purpose
 
@@ -39,14 +39,13 @@ Development happens at: https://repo.prod.meissa.de/meissa/c4k-jitsi
 
 Mirrors are:
 
-* https://codeberg.org/meissa/c4k-jitsi (Issues and PR)
+* https://gitlab.com/domaindrivenarchitecture/c4k-jitsi (issues and PR, CI)
-* https://gitlab.com/domaindrivenarchitecture/c4k-jitsi (CI)
 * https://github.com/DomainDrivenArchitecture/c4k-jitsi
 
 For more details about our repository model see: https://repo.prod.meissa.de/meissa/federate-your-repos
 
 ## License
 
-Copyright © 2021, 2022, 2023, 2024 meissa GmbH
+Copyright © 2022 meissa GmbH
 Licensed under the [Apache License, Version 2.0](LICENSE) (the "License")
 Pls. find licenses of our subcomponents [here](doc/SUBCOMPONENT_LICENSE)

build.py

@@ -30,9 +30,8 @@ def initialize(project):
         "release_organisation": "meissa",
         "release_repository_name": name,
         "release_artifacts": [
-            f"target/graalvm/{name}",
+            "target/uberjar/c4k-jitsi-standalone.jar",
-            f"target/uberjar/{name}-standalone.jar",
+            "target/frontend-build/c4k-jitsi.js",
-            f"target/frontend-build/{name}.js",
         ],
     }
 
@@ -97,7 +96,6 @@ def package_frontend(project):
 
 @task
 def package_uberjar(project):
-    run("lein uberjar", shell=True, check=True)
     run(
         "sha256sum target/uberjar/c4k-jitsi-standalone.jar > target/uberjar/c4k-jitsi-standalone.jar.sha256",
         shell=True,
@@ -110,39 +108,6 @@ def package_uberjar(project):
     )
 
 
-@task
-def package_native(project):
-    run(
-        "mkdir -p target/graalvm",
-        shell=True,
-        check=True,
-    )
-    run(
-        "native-image " +
-        "--native-image-info " +
-        "--report-unsupported-elements-at-runtime " +
-        "--no-server " +
-        "--no-fallback " +
-        "--features=clj_easy.graal_build_time.InitClojureClasses " +
-        f"-jar target/uberjar/{project.name}-standalone.jar " +
-        "-H:IncludeResources=.*.yaml " +
-        "-H:Log=registerResource:verbose " +
-        f"-H:Name=target/graalvm/{project.name}",
-        shell=True,
-        check=True,
-    )
-    run(
-        f"sha256sum target/graalvm/{project.name} > target/graalvm/{project.name}.sha256",
-        shell=True,
-        check=True,
-    )
-    run(
-        f"sha512sum target/graalvm/{project.name} > target/graalvm/{project.name}.sha512",
-        shell=True,
-        check=True,
-    )
-
-
 @task
 def upload_clj(project):
     run("lein deploy", shell=True, check=True)
@@ -162,22 +127,6 @@ def lint(project):
     )
 
 
-@task
-def inst(project):
-    package_uberjar(project)
-    package_native(project)
-    run(
-        f"sudo install -m=755 target/uberjar/{project.name}-standalone.jar /usr/local/bin/{project.name}-standalone.jar",
-        shell=True,
-        check=True,
-    )
-    run(
-        f"sudo install -m=755 target/graalvm/{project.name} /usr/local/bin/{project.name}",
-        shell=True,
-        check=True,
-    )
-
-
 @task
 def patch(project):
     linttest(project, "PATCH")

infrastructure/excalidraw-backend/build.py

@@ -6,7 +6,7 @@ from ddadevops import *
 name = "c4k-jitsi"
 MODULE = "excalidraw-backend"
 PROJECT_ROOT_PATH = "../.."
-version = "2.2.1-dev"
+version = "1.6.0"
 
 
 @init

infrastructure/excalidraw-backend/image/Dockerfile

@@ -1,9 +1,9 @@
 # Taken from: https://github.com/jitsi/excalidraw-backend
-FROM node:22-bookworm-slim
+FROM node:18.18.2-slim
 
 WORKDIR /excalidraw-backend
 
-COPY resources/package.json resources/package-lock.json resources/tsconfig.json resources/install.sh resources/src resources/install_functions_debian.sh ./
+COPY resources/package.json resources/package-lock.json resources/tsconfig.json resources/install.sh resources/src ./
 
 RUN ./install.sh
 

infrastructure/excalidraw-backend/image/resources/install.sh

@@ -1,17 +1,10 @@
 #!/bin/bash
-set -exo pipefail
+set -Eeo pipefail
 
-function main() {
+apt-get update > /dev/null
-    {
+apt-get upgrade -y > /dev/null
-        upgradeSystem
+apt-get clean
-    } > /dev/null
-    
-    cleanupDocker
-}
 
-source ./install_functions_debian.sh
+npm install -g npm
-DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes main
+npm ci
-
-npm audit fix
-npm ci --omit=dev
 npm run build

infrastructure/excalidraw-backend/image/resources/package.json

@@ -1,6 +1,6 @@
 {
     "name": "excalidraw-backend",
-    "version": "1.1.0",
+    "version": "1.0.0",
     "main": "src/index.js",
     "description": "Excalidraw backend",
     "repository": {
@@ -9,22 +9,22 @@
     },
     "private": true,
     "engines": {
-        "node": ">=18.0.0",
+        "node": ">=14.0.0",
-        "npm": ">=10.0.0"
+        "npm": ">=7.0.0"
     },
     "dependencies": {
-        "@types/debug": "4.1.10",
+        "@types/debug": "4.1.5",
-        "@types/express": "4.17.20",
+        "@types/express": "4.17.11",
-        "@types/ms": "0.7.33",
+        "@types/node": "14.14.31",
-        "@types/node": "20.8.7",
+        "@types/socket.io": "2.1.4",
         "cross-env": "^7.0.3",
-        "debug": "4.3.4",
+        "debug": "4.3.1",
-        "dotenv": "^16.0.0",
+        "dotenv": "^10.0.0",
-        "express": "^4.19.2",
+        "express": "4.17.1",
-        "socket.io": "^4.7.2",
+        "socket.io": "^2.5.0",
-        "prom-client": "^15.0.0",
+        "socket.io-prometheus-metrics": "^1.0.6",
-        "ts-node-dev": "^2.0.0",
+        "ts-node-dev": "^1.1.8",
-        "typescript": "5.2.2"
+        "typescript": "4.2.3"
     },
     "license": "MIT",
     "scripts": {
@@ -37,15 +37,16 @@
     },
     "devDependencies": {
         "@jitsi/eslint-config": "^4.1.0",
-        "@typescript-eslint/eslint-plugin": "6.8.0",
+        "@types/dotenv": "^8.2.0",
-        "@typescript-eslint/parser": "6.8.0",
+        "@typescript-eslint/eslint-plugin": "5.30.5",
-        "eslint": "^8.1.0",
+        "@typescript-eslint/parser": "5.30.4",
-        "eslint-plugin-import": "2.28.1",
+        "eslint": "8.1.0",
-        "eslint-plugin-jsdoc": "46.8.2",
+        "eslint-plugin-import": "2.25.2",
-        "eslint-plugin-typescript-sort-keys": "^3.1.0"
+        "eslint-plugin-jsdoc": "37.0.3",
+        "eslint-plugin-typescript-sort-keys": "^2.1.0"
     },
     "optionalDependencies": {
         "bufferutil": "^4.0.6",
-        "utf-8-validate": "^6.0.3"
+        "utf-8-validate": "^5.0.9"
     }
 }

infrastructure/excalidraw-backend/image/resources/src/index.ts

@@ -3,22 +3,11 @@
 import debug from 'debug';
 import dotenv from 'dotenv';
 import express from 'express';
-import { createServer } from 'node:http';
+import http from 'http';
-import { Server } from 'socket.io';
+import socketIO from 'socket.io';
-/* 
 import * as prometheus from 'socket.io-prometheus-metrics';
 
-do not use anymore, since 3 years no further progression, depends on debug 4.1.1, 
+const serverDebug = debug('server');
-wich is moderate vulnerable to regular expression denial of service when untrusted user 
-input is passed into the o formatter. 
-
-alternatively could be used prom-client
-*/
-
-const serverDebug = debug('httpServer');
-const app = express();
-const port = process.env.PORT || 80; // default port to listen
-const httpServer = createServer(app);
 
 dotenv.config(
   process.env.NODE_ENV === 'development'
@@ -26,59 +15,53 @@ dotenv.config(
       : { path: '.env.production' }
 );
 
+const app = express();
+const port = process.env.PORT || 80; // default port to listen
+
 app.get('/', (req, res) => {
     res.send('Excalidraw backend is up :)');
 });
 
-httpServer.listen(port, () => {
+const server = http.createServer(app);
+
+server.listen(port, () => {
     serverDebug(`listening on port: ${port}`);
 });
 
-const corsOptions = { 
+const io = socketIO(server, {
-                    origin: ['jitsi.test.meissa.de', 'jitsi.prod.meissa.de'],
+    handlePreflightRequest: (req, res) => {
-                    methods: ["GET", "POST"],
+        const headers = {
-                    credentials: true
+            'Access-Control-Allow-Headers': 'Content-Type, Authorization',
-};
+            'Access-Control-Allow-Origin': req.header?.origin ?? 'https://meet.jit.si',
+            'Access-Control-Allow-Credentials': true
+        };
 
-const io = new Server(httpServer, {
+        res.writeHead(200, headers);
-    allowEIO3: true,
+        res.end();
-    cors: corsOptions,
+    },
-    maxHttpBufferSize: 1e6,
+    maxHttpBufferSize: 10e6,
     pingTimeout: 10000
 });
 
 // listens on host:9090/metrics
-/* do not use
 prometheus.metrics(io, {
     collectDefaultMetrics: true
 });
-*/
 
-/* alternatively could be used:
+io.on('connection', socket => {
-
-const client = require('prom-client');
-const collectDefaultMetrics = client.collectDefaultMetrics;
-const Registry = client.Registry;
-const register = new Registry();
-collectDefaultMetrics({ register });
-
-or more:
-https://codersociety.com/blog/articles/nodejs-application-monitoring-with-prometheus-and-grafana
-*/
-
-io.on('connection', (socket) => {
     serverDebug(`connection established! ${socket.conn.request.url}`);
     io.to(`${socket.id}`).emit('init-room');
     socket.on('join-room', roomID => {
         serverDebug(`${socket.id} has joined ${roomID} for url ${socket.conn.request.url}`);
         socket.join(roomID);
-        if (io.sockets.adapter.rooms.get(roomID)?.size ?? 0 <= 1) {
+        if (io.sockets.adapter.rooms[roomID].length <= 1) {
             io.to(`${socket.id}`).emit('first-in-room');
         } else {
             socket.broadcast.to(roomID).emit('new-user', socket.id);
         }
         io.in(roomID).emit(
-            'room-user-change', Array.from(io.sockets.adapter.rooms.get(roomID) ?? [])
+            'room-user-change',
+            Object.keys(io.sockets.adapter.rooms[roomID].sockets)
         );
     });
 
@@ -86,7 +69,8 @@ io.on('connection', (socket) => {
     'server-broadcast',
         (roomID: string, encryptedData: ArrayBuffer, iv: Uint8Array) => {
             socket.broadcast.to(roomID).emit('client-broadcast', encryptedData, iv);
-    });
+        }
+    );
 
     socket.on(
     'server-volatile-broadcast',
@@ -94,14 +78,15 @@ io.on('connection', (socket) => {
         socket.volatile.broadcast
         .to(roomID)
         .emit('client-broadcast', encryptedData, iv);
-    });
+    }
+    );
 
     socket.on('disconnecting', () => {
         const rooms = io.sockets.adapter.rooms;
 
         for (const roomID of Object.keys(socket.rooms)) {
-            const clients = Array.from(rooms.get(roomID) ?? []).filter(id => id !== socket.id);
+            const clients = Object.keys(rooms[roomID].sockets).filter(id => id !== socket.id);
-                        
+
             if (roomID !== socket.id) {
                 socket.to(roomID).emit('user has left', socket.id);
             }

infrastructure/excalidraw-backend/image/resources/tsconfig.json

@@ -11,7 +11,7 @@
         "forceConsistentCasingInFileNames": true,
         "resolveJsonModule": true,
         "isolatedModules": true,
-        "outDir": "dist",
+        "outDir": "dist"
     }
   }
   

infrastructure/web/build.py

@@ -6,7 +6,7 @@ from ddadevops import *
 name = "c4k-jitsi"
 MODULE = "web"
 PROJECT_ROOT_PATH = "../.."
-version = "2.2.1-dev"
+version = "1.6.0"
 
 
 @init

infrastructure/web/image/Dockerfile

@@ -1,5 +1,4 @@
-# IMPORTANT: In case of base image update, "./resources/settings-config.js" also has to be updated manually!
+FROM jitsi/web:stable-8922-1
-FROM jitsi/web:stable-9646
 
 # Prepare Configuration
 ADD resources /tmp

infrastructure/web/image/resources/install.sh

@@ -1,17 +1,10 @@
 #!/bin/bash
+set -eux
 
-set -exo pipefail
+apt-get update > /dev/null
+apt-get upgrade -y > /dev/null
+apt-get clean
 
-function main() {
-    {
-        upgradeSystem
-    } > /dev/null
 
-    install -m 0700 /tmp/install-debug.sh /usr/local/bin/
+install -m 0700 /tmp/install-debug.sh /usr/local/bin/
-    install -m 0644 /tmp/settings-config.js /defaults/settings-config.js
+install -m 0644 /tmp/settings-config.js /defaults/settings-config.js
-
-    cleanupDocker
-}
-
-source /tmp/install_functions_debian.sh
-DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes main

infrastructure/web/image/resources/settings-config.js

@@ -5,6 +5,8 @@
 {{ $ENABLE_BREAKOUT_ROOMS := .Env.ENABLE_BREAKOUT_ROOMS | default "true" | toBool -}}
 {{ $ENABLE_CALENDAR := .Env.ENABLE_CALENDAR | default "false" | toBool -}}
 {{ $ENABLE_FILE_RECORDING_SHARING := .Env.ENABLE_FILE_RECORDING_SHARING | default "false" | toBool -}}
+{{ $ENABLE_IPV6 := .Env.ENABLE_IPV6 | default "true" | toBool -}}
+{{ $ENABLE_LIPSYNC := .Env.ENABLE_LIPSYNC | default "false" | toBool -}}
 {{ $ENABLE_NO_AUDIO_DETECTION := .Env.ENABLE_NO_AUDIO_DETECTION | default "true" | toBool -}}
 {{ $ENABLE_P2P := .Env.ENABLE_P2P | default "true" | toBool -}}
 {{ $ENABLE_PREJOIN_PAGE := .Env.ENABLE_PREJOIN_PAGE | default "true" | toBool -}}
@@ -20,6 +22,7 @@
 {{ $ENABLE_REMB := .Env.ENABLE_REMB | default "true" | toBool -}}
 {{ $ENABLE_REQUIRE_DISPLAY_NAME := .Env.ENABLE_REQUIRE_DISPLAY_NAME | default "false" | toBool -}}
 {{ $ENABLE_SIMULCAST := .Env.ENABLE_SIMULCAST | default "true" | toBool -}}
+{{ $ENABLE_STATS_ID := .Env.ENABLE_STATS_ID | default "false" | toBool -}}
 {{ $ENABLE_STEREO := .Env.ENABLE_STEREO | default "false" | toBool -}}
 {{ $ENABLE_OPUS_RED := .Env.ENABLE_OPUS_RED | default "false" | toBool -}}
 {{ $ENABLE_TALK_WHILE_MUTED := .Env.ENABLE_TALK_WHILE_MUTED | default "false" | toBool -}}
@@ -34,8 +37,8 @@
 {{ $ENABLE_JAAS_COMPONENTS := .Env.ENABLE_JAAS_COMPONENTS | default "0" | toBool }}
 {{ $HIDE_PREJOIN_DISPLAY_NAME := .Env.HIDE_PREJOIN_DISPLAY_NAME | default "false" | toBool -}}
 {{ $PUBLIC_URL := .Env.PUBLIC_URL | default "https://localhost:8443" -}}
-{{ $RESOLUTION := .Env.RESOLUTION | default "720" -}}
+{{ $RESOLUTION := .Env.RESOLUTION | default "1080" -}}
-{{ $RESOLUTION_MIN := .Env.RESOLUTION_MIN | default "180" -}}
+{{ $RESOLUTION_MIN := .Env.RESOLUTION_MIN | default "240" -}}
 {{ $RESOLUTION_WIDTH := .Env.RESOLUTION_WIDTH | default "1280" -}}
 {{ $RESOLUTION_WIDTH_MIN := .Env.RESOLUTION_WIDTH_MIN | default "320" -}}
 {{ $START_AUDIO_ONLY := .Env.START_AUDIO_ONLY | default "false" | toBool -}}
@@ -46,12 +49,14 @@
 {{ $ENABLE_NOISY_MIC_DETECTION := .Env.ENABLE_NOISY_MIC_DETECTION | default "true" | toBool -}}
 {{ $START_VIDEO_MUTED := .Env.START_VIDEO_MUTED | default 10 -}}
 {{ $START_WITH_VIDEO_MUTED := .Env.START_WITH_VIDEO_MUTED | default "false" | toBool -}}
-{{ $DESKTOP_SHARING_FRAMERATE_AUTO := .Env.DESKTOP_SHARING_FRAMERATE_AUTO | default "true" | toBool -}}
 {{ $DESKTOP_SHARING_FRAMERATE_MIN := .Env.DESKTOP_SHARING_FRAMERATE_MIN | default 5 -}}
 {{ $DESKTOP_SHARING_FRAMERATE_MAX := .Env.DESKTOP_SHARING_FRAMERATE_MAX | default 5 -}}
+{{ $TESTING_OCTO_PROBABILITY := .Env.TESTING_OCTO_PROBABILITY | default "0" -}}
+{{ $TESTING_CAP_SCREENSHARE_BITRATE := .Env.TESTING_CAP_SCREENSHARE_BITRATE | default "1" -}}
 {{ $XMPP_DOMAIN := .Env.XMPP_DOMAIN | default "meet.jitsi" -}}
 {{ $XMPP_RECORDER_DOMAIN := .Env.XMPP_RECORDER_DOMAIN | default "recorder.meet.jitsi" -}}
 {{ $DISABLE_DEEP_LINKING  := .Env.DISABLE_DEEP_LINKING | default "false" | toBool -}}
+{{ $VIDEOQUALITY_ENFORCE_PREFERRED_CODEC := .Env.VIDEOQUALITY_ENFORCE_PREFERRED_CODEC | default "false" | toBool -}}
 {{ $DISABLE_POLLS := .Env.DISABLE_POLLS | default "false" | toBool -}}
 {{ $DISABLE_REACTIONS := .Env.DISABLE_REACTIONS | default "false" | toBool -}}
 {{ $DISABLE_REMOTE_VIDEO_MENU := .Env.DISABLE_REMOTE_VIDEO_MENU | default "false" | toBool -}}
@@ -66,40 +71,34 @@
 {{ $ROOM_PASSWORD_DIGITS := .Env.ROOM_PASSWORD_DIGITS | default "false" -}}
 {{ $WHITEBOARD_COLLAB_SERVER_PUBLIC_URL := .Env.WHITEBOARD_COLLAB_SERVER_PUBLIC_URL | default "" -}}
 {{ $WHITEBOARD_ENABLED := .Env.WHITEBOARD_ENABLED | default "false" | toBool -}}
-{{ $TESTING_AV1_SUPPORT := .Env.TESTING_AV1_SUPPORT | default "false" | toBool -}}
 
 // Video configuration.
 //
 
-config.resolution = {{ $RESOLUTION }};
+if (!config.hasOwnProperty('constraints')) config.constraints = {};
-config.constraints = {
+if (!config.constraints.hasOwnProperty('video')) config.constraints.video = {};
-    video: {
-        height: { ideal: {{ $RESOLUTION }}, max: {{ $RESOLUTION }}, min: {{ $RESOLUTION_MIN }} },
-        width: { ideal: {{ $RESOLUTION_WIDTH }}, max: {{ $RESOLUTION_WIDTH }}, min: {{ $RESOLUTION_WIDTH_MIN }}},
-    }
-};
 
-{{ if not $ENABLE_SIMULCAST -}}
+config.resolution = {{ $RESOLUTION }};
-config.disableSimulcast = true;
+config.constraints.video.height = { ideal: {{ $RESOLUTION }}, max: {{ $RESOLUTION }}, min: {{ $RESOLUTION_MIN }} };
-{{ end -}}
+config.constraints.video.width = { ideal: {{ $RESOLUTION_WIDTH }}, max: {{ $RESOLUTION_WIDTH }}, min: {{ $RESOLUTION_WIDTH_MIN }}};
+config.disableSimulcast = {{ not $ENABLE_SIMULCAST }};
 config.startVideoMuted = {{ $START_VIDEO_MUTED }};
 config.startWithVideoMuted = {{ $START_WITH_VIDEO_MUTED }};
 
-config.flags = {
+{{ if .Env.START_BITRATE -}}
-    sourceNameSignaling: true,
+config.startBitrate = '{{ .Env.START_BITRATE }}';
-    sendMultipleVideoStreams: true,
+{{ end -}}
-    receiveMultipleVideoStreams: true
+
-};
+if (!config.hasOwnProperty('flags')) config.flags = {};
+config.flags.sourceNameSignaling = true;
+config.flags.sendMultipleVideoStreams = true;
+config.flags.receiveMultipleVideoStreams = true;
+
 
 // ScreenShare Configuration.
 //
 
-{{ if not $DESKTOP_SHARING_FRAMERATE_AUTO -}}
+config.desktopSharingFrameRate = { min: {{ $DESKTOP_SHARING_FRAMERATE_MIN }}, max: {{ $DESKTOP_SHARING_FRAMERATE_MAX }} };
-config.desktopSharingFrameRate = {
-    min: {{ $DESKTOP_SHARING_FRAMERATE_MIN }},
-    max: {{ $DESKTOP_SHARING_FRAMERATE_MAX }}
-};
-{{ end -}}
 
 // Audio configuration.
 //
@@ -108,9 +107,8 @@ config.enableNoAudioDetection = {{ $ENABLE_NO_AUDIO_DETECTION }};
 config.enableTalkWhileMuted = {{ $ENABLE_TALK_WHILE_MUTED }};
 config.disableAP = {{ not $ENABLE_AUDIO_PROCESSING }};
 
-config.audioQuality = {
+if (!config.hasOwnProperty('audioQuality')) config.audioQuality = {};
-    stereo: {{ $ENABLE_STEREO }}
+config.audioQuality.stereo = {{ $ENABLE_STEREO }};
-};
 
 {{ if .Env.AUDIO_QUALITY_OPUS_BITRATE -}}
 config.audioQuality.opusMaxAverageBitrate = '{{ .Env.AUDIO_QUALITY_OPUS_BITRATE }}';
@@ -128,9 +126,9 @@ config.enableNoisyMicDetection = {{ $ENABLE_NOISY_MIC_DETECTION }};
 // Peer-to-Peer options.
 //
 
-config.p2p = {
+if (!config.hasOwnProperty('p2p')) config.p2p = {};
-    enabled: {{ $ENABLE_P2P }}
+
-};
+config.p2p.enabled = {{ $ENABLE_P2P }};
 
 
 // Breakout Rooms
@@ -156,32 +154,28 @@ config.etherpad_base = '{{ $PUBLIC_URL }}/etherpad/p/';
 
 config.hiddenDomain = '{{ $XMPP_RECORDER_DOMAIN }}';
 
-config.recordingService = {
+if (!config.hasOwnProperty('recordingService')) config.recordingService = {};
-    // Whether to enable file recording or not using the "service" defined by the finalizer in Jibri
-    enabled: {{ $ENABLE_SERVICE_RECORDING }},
 
-    // Whether to show the possibility to share file recording with other people
+// Whether to enable file recording or not using the "service" defined by the finalizer in Jibri
-    // (e.g. meeting participants), based on the actual implementation
+config.recordingService.enabled = {{ $ENABLE_SERVICE_RECORDING }};
-    // on the backend.
+
-    sharingEnabled: {{ $ENABLE_FILE_RECORDING_SHARING }}
+// Whether to show the possibility to share file recording with other people
-};
+// (e.g. meeting participants), based on the actual implementation
+// on the backend.
+config.recordingService.sharingEnabled = {{ $ENABLE_FILE_RECORDING_SHARING }};
 
 // Live streaming configuration.
-config.liveStreaming = {
+if (!config.hasOwnProperty('liveStreaming')) config.liveStreaming = {};
-    enabled: {{ $ENABLE_LIVESTREAMING }},
+config.liveStreaming.enabled = {{ $ENABLE_LIVESTREAMING }};
-    dataPrivacyLink: '{{ $ENABLE_LIVESTREAMING_DATA_PRIVACY_LINK }}',
+config.liveStreaming.dataPrivacyLink= '{{ $ENABLE_LIVESTREAMING_DATA_PRIVACY_LINK }}';
-    helpLink: '{{ $ENABLE_LIVESTREAMING_HELP_LINK }}',
+config.liveStreaming.helpLink= '{{ $ENABLE_LIVESTREAMING_HELP_LINK }}';
-    termsLink: '{{ $ENABLE_LIVESTREAMING_TERMS_LINK }}',
+config.liveStreaming.termsLink= '{{ $ENABLE_LIVESTREAMING_TERMS_LINK }}';
-    validatorRegExpString: '{{ $ENABLE_LIVESTREAMING_VALIDATOR_REGEXP_STRING }}'
+config.liveStreaming.validatorRegExpString= '{{ $ENABLE_LIVESTREAMING_VALIDATOR_REGEXP_STRING }}';
-};
-
 
 {{ if .Env.DROPBOX_APPKEY -}}
 // Enable the dropbox integration.
-config.dropbox = {
+if (!config.hasOwnProperty('dropbox')) config.dropbox = {};
-    appKey: '{{ .Env.DROPBOX_APPKEY }}'
+config.dropbox.appKey = '{{ .Env.DROPBOX_APPKEY }}';
-};
-
 {{ if .Env.DROPBOX_REDIRECT_URI -}}
 // A URL to redirect the user to, after authenticating
 // by default uses:
@@ -189,21 +183,20 @@ config.dropbox = {
 config.dropbox.redirectURI = '{{ .Env.DROPBOX_REDIRECT_URI }}';
 {{ end -}}
 {{ end -}}
-
 {{ end -}}
 
+
 // Local recording configuration.
-config.localRecording = {
+if (!config.hasOwnProperty('localRecording')) config.localRecording = {};
-    disable: {{ $DISABLE_LOCAL_RECORDING }},
+config.localRecording.disable = {{ $DISABLE_LOCAL_RECORDING }};
-    notifyAllParticipants: {{ $ENABLE_LOCAL_RECORDING_NOTIFY_ALL_PARTICIPANT }},
+config.localRecording.notifyAllParticipants = {{ $ENABLE_LOCAL_RECORDING_NOTIFY_ALL_PARTICIPANT }};
-    disableSelfRecording: {{ $ENABLE_LOCAL_RECORDING_SELF_START }}
+config.localRecording.disableSelfRecording = {{ $ENABLE_LOCAL_RECORDING_SELF_START }};
-};
 
 
 // Analytics.
 //
 
-config.analytics = {};
+if (!config.hasOwnProperty('analytics')) config.analytics = {};
 
 {{ if .Env.AMPLITUDE_ID -}}
 // The Amplitude APP Key:
@@ -234,6 +227,24 @@ config.analytics.scriptURLs = [ '{{ join "','" (splitList "," .Env.ANALYTICS_SCR
 config.analytics.whiteListedEvents = [ '{{ join "','" (splitList "," .Env.ANALYTICS_WHITELISTED_EVENTS) }}' ];
 {{ end -}}
 
+{{ if .Env.CALLSTATS_CUSTOM_SCRIPT_URL -}}
+config.callStatsCustomScriptUrl = '{{ .Env.CALLSTATS_CUSTOM_SCRIPT_URL }}';
+{{ end -}}
+
+{{ if .Env.CALLSTATS_ID -}}
+// To enable sending statistics to callstats.io you must provide the
+// Application ID and Secret.
+config.callStatsID = '{{ .Env.CALLSTATS_ID }}';
+{{ end -}}
+
+{{ if .Env.CALLSTATS_ID -}}
+config.callStatsSecret = '{{ .Env.CALLSTATS_SECRET }}';
+{{ end -}}
+
+// Enables callstatsUsername to be reported as statsId and used
+// by callstats as repoted remote id.
+config.enableStatsID = {{ $ENABLE_STATS_ID }};
+
 
 // Dial in/out services.
 //
@@ -290,12 +301,11 @@ config.peopleSearchQueryTypes = ['user','conferenceRooms'];
 //
 
 // Prejoin page.
-config.prejoinConfig = {
+if (!config.hasOwnProperty('prejoinConfig')) config.prejoinConfig = {};
-    enabled: {{ $ENABLE_PREJOIN_PAGE }},
+config.prejoinConfig.enabled = {{ $ENABLE_PREJOIN_PAGE }};
 
-    // Hides the participant name editing field in the prejoin screen.
+// Hides the participant name editing field in the prejoin screen.
-    hideDisplayName: {{ $HIDE_PREJOIN_DISPLAY_NAME }}
+config.prejoinConfig.hideDisplayName = {{ $HIDE_PREJOIN_DISPLAY_NAME }};
-};
 
 // List of buttons to hide from the extra join options dropdown on prejoin screen.
 {{ if .Env.HIDE_PREJOIN_EXTRA_BUTTONS -}}
@@ -303,9 +313,7 @@ config.prejoinConfig.hideExtraJoinButtons = [ '{{ join "','" (splitList "," .Env
 {{ end -}}
 
 // Welcome page.
-config.welcomePage = {
+config.enableWelcomePage = {{ $ENABLE_WELCOME_PAGE }};
-    disabled: {{ not $ENABLE_WELCOME_PAGE }}
-};
 
 // Close page.
 config.enableClosePage = {{ $ENABLE_CLOSE_PAGE }};
@@ -336,26 +344,24 @@ config.roomPasswordNumberOfDigits = {{ $ROOM_PASSWORD_DIGITS }};
 // Advanced.
 //
 
-{{ if not $ENABLE_REMB -}}
+// Lipsync hack in jicofo, may not be safe.
-config.enableRemb = false;
+config.enableLipSync = {{ $ENABLE_LIPSYNC }};
-{{ end -}}
-{{ if not $ENABLE_TCC -}}
-config.enableTcc = false;
-{{ end -}}
 
+config.enableRemb = {{ $ENABLE_REMB }};
+config.enableTcc = {{ $ENABLE_TCC }};
+
+// Enable IPv6 support.
+config.useIPv6 = {{ $ENABLE_IPV6 }};
 
 // Transcriptions (subtitles and buttons can be configured in interface_config)
-config.transcription = {
+config.transcription = { enabled: {{ $ENABLE_TRANSCRIPTIONS }} };
-    enabled: {{ $ENABLE_TRANSCRIPTIONS }},
+config.transcription.translationLanguages = {{ $TRANSLATION_LANGUAGES }};
-    translationLanguages: {{ $TRANSLATION_LANGUAGES }},
+config.transcription.translationLanguagesHead = {{ $TRANSLATION_LANGUAGES_HEAD }};
-    translationLanguagesHead: {{ $TRANSLATION_LANGUAGES_HEAD }},
+config.transcription.useAppLanguage = {{ $USE_APP_LANGUAGE }};
-    useAppLanguage: {{ $USE_APP_LANGUAGE }},
+config.transcription.preferredLanguage = '{{ $PREFERRED_LANGUAGE }}';
-    preferredLanguage: '{{ $PREFERRED_LANGUAGE }}',
+config.transcription.disableStartForAll = {{ $DISABLE_START_FOR_ALL }};
-    disableStartForAll: {{ $DISABLE_START_FOR_ALL }},
+config.transcription.autoCaptionOnRecord = {{ $AUTO_CAPTION_ON_RECORD }};
-    autoCaptionOnRecord: {{ $AUTO_CAPTION_ON_RECORD }},
-};
 
-// Dynamic branding
 {{ if .Env.DYNAMIC_BRANDING_URL -}}
 // External API url used to receive branding specific information.
 config.dynamicBrandingUrl = '{{ .Env.DYNAMIC_BRANDING_URL }}';
@@ -364,7 +370,7 @@ config.brandingDataUrl = '{{ .Env.BRANDING_DATA_URL }}';
 {{ end -}}
 
 {{ if .Env.TOKEN_AUTH_URL -}}
-// Authenticate using external service
+// Authenticate using external service or just focus external auth window if there is one already.
 config.tokenAuthUrl = '{{ .Env.TOKEN_AUTH_URL }}';
 {{ end -}}
 
@@ -372,7 +378,7 @@ config.tokenAuthUrl = '{{ .Env.TOKEN_AUTH_URL }}';
 // Deployment information.
 //
 
-config.deploymentInfo = {};
+if (!config.hasOwnProperty('deploymentInfo')) config.deploymentInfo = {};
 
 {{ if .Env.DEPLOYMENTINFO_ENVIRONMENT -}}
 config.deploymentInfo.environment = '{{ .Env.DEPLOYMENTINFO_ENVIRONMENT }}';
@@ -394,6 +400,16 @@ config.deploymentInfo.region = '{{ .Env.DEPLOYMENTINFO_REGION }}';
 config.deploymentInfo.userRegion = '{{ $DEPLOYMENTINFO_USERREGION }}';
 {{ end -}}
 
+
+// Testing
+//
+
+if (!config.hasOwnProperty('testing')) config.testing = {};
+if (!config.testing.hasOwnProperty('octo')) config.testing.octo = {};
+
+config.testing.capScreenshareBitrate = {{ $TESTING_CAP_SCREENSHARE_BITRATE }};
+config.testing.octo.probability = {{ $TESTING_OCTO_PROBABILITY }};
+
 // Deep Linking
 config.disableDeepLinking = {{ $DISABLE_DEEP_LINKING }};
 
@@ -402,116 +418,26 @@ config.disableDeepLinking = {{ $DISABLE_DEEP_LINKING }};
 config.p2p.preferredCodec = '{{ .Env.P2P_PREFERRED_CODEC }}';
 {{ end -}}
 
-// Video quality settings.
+// Enable preferred video Codec
-//
+if (!config.hasOwnProperty('videoQuality')) config.videoQuality = {};
-
-config.videoQuality = {};
 {{ if .Env.VIDEOQUALITY_PREFERRED_CODEC -}}
 config.videoQuality.preferredCodec = '{{ .Env.VIDEOQUALITY_PREFERRED_CODEC }}';
 {{ end -}}
 
-config.videoQuality.av1 = {};
+config.videoQuality.enforcePreferredCodec = {{ $VIDEOQUALITY_ENFORCE_PREFERRED_CODEC }};
 
-{{ if .Env.VIDEOQUALITY_BITRATE_AV1_LOW }}
+if (!config.videoQuality.hasOwnProperty('maxBitratesVideo')) config.videoQuality.maxBitratesVideo = null;
-config.videoQuality.av1.low = {{ .Env.VIDEOQUALITY_BITRATE_AV1_LOW }};
+{{ if and .Env.VIDEOQUALITY_BITRATE_H264_LOW .Env.VIDEOQUALITY_BITRATE_H264_STANDARD .Env.VIDEOQUALITY_BITRATE_H264_HIGH -}}
+config.videoQuality.maxBitratesVideo = config.videoQuality.maxBitratesVideo || {}
+config.videoQuality.maxBitratesVideo.H264 = { low: {{ .Env.VIDEOQUALITY_BITRATE_H264_LOW }}, standard: {{ .Env.VIDEOQUALITY_BITRATE_H264_STANDARD }}, high: {{ .Env.VIDEOQUALITY_BITRATE_H264_HIGH }} };
 {{ end -}}
-
+{{ if and .Env.VIDEOQUALITY_BITRATE_VP8_LOW .Env.VIDEOQUALITY_BITRATE_VP8_STANDARD .Env.VIDEOQUALITY_BITRATE_VP8_HIGH -}}
-{{ if .Env.VIDEOQUALITY_BITRATE_AV1_STANDARD }}
+config.videoQuality.maxBitratesVideo = config.videoQuality.maxBitratesVideo || {}
-config.videoQuality.av1.standard = {{ .Env.VIDEOQUALITY_BITRATE_AV1_STANDARD }};
+config.videoQuality.maxBitratesVideo.VP8 = { low: {{ .Env.VIDEOQUALITY_BITRATE_VP8_LOW }}, standard: {{ .Env.VIDEOQUALITY_BITRATE_VP8_STANDARD }}, high: {{ .Env.VIDEOQUALITY_BITRATE_VP8_HIGH }} };
 {{ end -}}
-
+{{ if and .Env.VIDEOQUALITY_BITRATE_VP9_LOW .Env.VIDEOQUALITY_BITRATE_VP9_STANDARD .Env.VIDEOQUALITY_BITRATE_VP9_HIGH -}}
-{{ if .Env.VIDEOQUALITY_BITRATE_AV1_HIGH }}
+config.videoQuality.maxBitratesVideo = config.videoQuality.maxBitratesVideo || {}
-config.videoQuality.av1.high = {{ .Env.VIDEOQUALITY_BITRATE_AV1_HIGH }};
+config.videoQuality.maxBitratesVideo.VP9 = { low: {{ .Env.VIDEOQUALITY_BITRATE_VP9_LOW }}, standard: {{ .Env.VIDEOQUALITY_BITRATE_VP9_STANDARD }}, high: {{ .Env.VIDEOQUALITY_BITRATE_VP9_HIGH }} };
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_AV1_FULL }}
-config.videoQuality.av1.fullHd = {{ .Env.VIDEOQUALITY_BITRATE_AV1_FULL }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_AV1_ULTRA }}
-config.videoQuality.av1.ultraHd = {{ .Env.VIDEOQUALITY_BITRATE_AV1_ULTRA }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_AV1_SS_HIGH }}
-config.videoQuality.av1.ssHigh = {{ .Env.VIDEOQUALITY_BITRATE_AV1_SS_HIGH }};
-{{ end -}}
-
-config.videoQuality.h264 = {};
-
-{{ if .Env.VIDEOQUALITY_BITRATE_H264_LOW }}
-config.videoQuality.h264.low = {{ .Env.VIDEOQUALITY_BITRATE_H264_LOW }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_H264_STANDARD }}
-config.videoQuality.h264.standard = {{ .Env.VIDEOQUALITY_BITRATE_H264_STANDARD }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_H264_HIGH }}
-config.videoQuality.h264.high = {{ .Env.VIDEOQUALITY_BITRATE_H264_HIGH }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_H264_FULL }}
-config.videoQuality.h264.fullHd = {{ .Env.VIDEOQUALITY_BITRATE_H264_FULL }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_H264_ULTRA }}
-config.videoQuality.h264.ultraHd = {{ .Env.VIDEOQUALITY_BITRATE_H264_ULTRA }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_H264_SS_HIGH }}
-config.videoQuality.h264.ssHigh = {{ .Env.VIDEOQUALITY_BITRATE_H264_SS_HIGH }};
-{{ end -}}
-
-config.videoQuality.vp8 = {};
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP8_LOW }}
-config.videoQuality.vp8.low = {{ .Env.VIDEOQUALITY_BITRATE_VP8_LOW }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP8_STANDARD }}
-config.videoQuality.vp8.standard = {{ .Env.VIDEOQUALITY_BITRATE_VP8_STANDARD }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP8_HIGH }}
-config.videoQuality.vp8.high = {{ .Env.VIDEOQUALITY_BITRATE_VP8_HIGH }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP8_FULL }}
-config.videoQuality.vp8.fullHd = {{ .Env.VIDEOQUALITY_BITRATE_VP8_FULL }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP8_ULTRA }}
-config.videoQuality.vp8.ultraHd = {{ .Env.VIDEOQUALITY_BITRATE_VP8_ULTRA }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP8_SS_HIGH }}
-config.videoQuality.vp8.ssHigh = {{ .Env.VIDEOQUALITY_BITRATE_VP8_SS_HIGH }};
-{{ end -}}
-
-config.videoQuality.vp9 = {};
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP9_LOW }}
-config.videoQuality.vp9.low = {{ .Env.VIDEOQUALITY_BITRATE_VP9_LOW }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP9_STANDARD }}
-config.videoQuality.vp9.standard = {{ .Env.VIDEOQUALITY_BITRATE_VP9_STANDARD }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP9_HIGH }}
-config.videoQuality.vp9.high = {{ .Env.VIDEOQUALITY_BITRATE_VP9_HIGH }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP9_FULL }}
-config.videoQuality.vp9.fullHd = {{ .Env.VIDEOQUALITY_BITRATE_VP9_FULL }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP9_ULTRA }}
-config.videoQuality.vp9.ultraHd = {{ .Env.VIDEOQUALITY_BITRATE_VP9_ULTRA }};
-{{ end -}}
-
-{{ if .Env.VIDEOQUALITY_BITRATE_VP9_SS_HIGH }}
-config.videoQuality.vp9.ssHigh = {{ .Env.VIDEOQUALITY_BITRATE_VP9_SS_HIGH }};
 {{ end -}}
 
  // Reactions
@@ -531,18 +457,15 @@ config.hiddenPremeetingButtons = [ '{{ join "','" (splitList "," .Env.HIDE_PREME
 {{ end -}}
 
 // Configure remote participant video menu
-config.remoteVideoMenu = {
+if (!config.hasOwnProperty('remoteVideoMenu')) config.remoteVideoMenu = {};
-    disabled: {{ $DISABLE_REMOTE_VIDEO_MENU }},
+config.remoteVideoMenu.disabled = {{ $DISABLE_REMOTE_VIDEO_MENU }};
-    disableKick: {{ $DISABLE_KICKOUT }},
+config.remoteVideoMenu.disableKick = {{ $DISABLE_KICKOUT }};
-    disableGrantModerator: {{ $DISABLE_GRANT_MODERATOR }},
+config.remoteVideoMenu.disableGrantModerator = {{ $DISABLE_GRANT_MODERATOR }};
-    disablePrivateChat: {{ $DISABLE_PRIVATE_CHAT }}
+config.remoteVideoMenu.disablePrivateChat = {{ $DISABLE_PRIVATE_CHAT }};
-};
 
 // Configure e2eping
-config.e2eping = {
+if (!config.hasOwnProperty('e2eping')) config.e2eping = {};
-    enabled: {{ $ENABLE_E2EPING }}
+config.e2eping.enabled = {{ $ENABLE_E2EPING }};
-};
-
 {{ if .Env.E2EPING_NUM_REQUESTS -}}
 config.e2eping.numRequests = {{ .Env.E2EPING_NUM_REQUESTS }};
 {{ end -}}
@@ -554,17 +477,12 @@ config.e2eping.maxMessagePerSecond = {{ .Env.E2EPING_MAX_MESSAGE_PER_SECOND }};
 {{ end }}
 
 // Settings for the Excalidraw whiteboard integration.
-config.whiteboard = {
+if (!config.hasOwnProperty('whiteboard')) config.whiteboard = {};
-    enabled: {{ $WHITEBOARD_ENABLED }},
+config.whiteboard.enabled = {{ $WHITEBOARD_ENABLED }};
-    collabServerBaseUrl: '{{ $WHITEBOARD_COLLAB_SERVER_PUBLIC_URL }}'
+config.whiteboard.collabServerBaseUrl = '{{ $WHITEBOARD_COLLAB_SERVER_PUBLIC_URL }}';
-};
 
-// Testing
-config.testing = {
-    enableAv1Support: {{ $TESTING_AV1_SUPPORT }}
-};
 
 // CUSTOM ADJUSTMENTS
 config.disableThirdPartyRequests = true;
 config.channelLastN = 8;
-config.enableLayerSuspension = true;
+config.enableLayerSuspension = true;

package.json

@@ -2,7 +2,7 @@
     "name": "c4k-jitsi",
     "description": "Generate c4k yaml for a jitsi deployment.",
     "author": "meissa GmbH",
-    "version": "2.2.1-SNAPSHOT",
+    "version": "1.6.0",
     "homepage": "https://gitlab.com/domaindrivenarchitecture/c4k-jitsi#readme",
     "repository": "https://www.npmjs.com/package/c4k-jitsi",
     "license": "APACHE2",

project.clj

@@ -1,17 +1,16 @@
-(defproject org.domaindrivenarchitecture/c4k-jitsi "2.2.1-SNAPSHOT"
+(defproject org.domaindrivenarchitecture/c4k-jitsi "1.6.0"
   :description "jitsi c4k-installation package"
   :url "https://domaindrivenarchitecture.org"
   :license {:name "Apache License, Version 2.0"
             :url "https://www.apache.org/licenses/LICENSE-2.0.html"}
-  :dependencies [[org.clojure/clojure "1.12.0"]
+  :dependencies [[org.clojure/clojure "1.11.1"]
-                 [org.clojure/tools.reader "1.5.0"]
+                 [org.clojure/tools.reader "1.3.7"]
-                 [org.domaindrivenarchitecture/c4k-common-clj "8.0.0"]
+                 [org.domaindrivenarchitecture/c4k-common-clj "6.1.0"]
                  [hickory "0.7.1" :exclusions [viebel/codox-klipse-theme]]]
   :target-path "target/%s/"
   :source-paths ["src/main/cljc"
                  "src/main/clj"]
-  :resource-paths ["src/main/resources"
+  :resource-paths ["src/main/resources"]
-                   "project.clj"]
   :repositories [["snapshots" :clojars]
                  ["releases" :clojars]]
   :deploy-repositories [["snapshots" {:sign-releases false :url "https://clojars.org/repo"}]
@@ -23,14 +22,25 @@
              :uberjar {:aot :all
                        :main dda.c4k-jitsi.uberjar
                        :uberjar-name "c4k-jitsi-standalone.jar"
-                       :dependencies [[org.clojure/tools.cli "1.1.230"]
+                       :dependencies [[org.clojure/tools.cli "1.0.219"]
-                                      [ch.qos.logback/logback-classic "1.5.12"
+                                      [ch.qos.logback/logback-classic "1.4.11"
                                        :exclusions [com.sun.mail/javax.mail]]
-                                      [org.slf4j/jcl-over-slf4j "2.0.16"]
+                                      [org.slf4j/jcl-over-slf4j "2.0.9"]]}}
-                                      [com.github.clj-easy/graal-build-time "1.0.5"]]}}
   :release-tasks [["test"]
                   ["vcs" "assert-committed"]
                   ["change" "version" "leiningen.release/bump-version" "release"]
                   ["vcs" "commit"]
                   ["vcs" "tag" "v" "--no-sign"]
-                  ["change" "version" "leiningen.release/bump-version"]])
+                  ["change" "version" "leiningen.release/bump-version"]]
+  :aliases {"native" ["shell"
+                      "native-image"
+                      "--report-unsupported-elements-at-runtime"
+                      "--initialize-at-build-time"
+                      "-jar" "target/uberjar/c4k-jitsi-standalone.jar"
+                      "-H:ResourceConfigurationFiles=graalvm-resource-config.json"
+                      "-H:Log=registerResource"
+                      "-H:Name=target/graalvm/${:name}"]
+            "inst" ["shell" 
+                    "sh"
+                    "-c"
+                    "lein uberjar && sudo install -m=755 target/uberjar/c4k-jitsi-standalone.jar /usr/local/bin/c4k-jitsi-standalone.jar"]})

shadow-cljs.edn

@@ -4,7 +4,7 @@
                 "src/test/cljc"
                 "src/test/cljs"
                 "src/test/resources"]
- :dependencies [[org.domaindrivenarchitecture/c4k-common-cljs "8.0.0"]
+ :dependencies [[org.domaindrivenarchitecture/c4k-common-cljs "6.1.0"]
                 [hickory "0.7.1"]]
  :builds {:frontend {:target :browser
                      :modules {:main {:init-fn dda.c4k-jitsi.browser/init}}

src/main/clj/dda/c4k_jitsi/uberjar.clj

@@ -5,11 +5,10 @@
    [dda.c4k-jitsi.core :as core]))
 
 (defn -main [& cmd-args]
-  (uberjar/main-cm
+  (uberjar/main-common
-   "c4k-jitsi"
+   "c4k-jitsi" 
-   core/config?
+   core/config? 
    core/auth?
-   core/config-defaults
+   core/config-defaults 
-   core/config-objects
+   core/k8s-objects
-   core/auth-objects
    cmd-args))

src/main/cljc/dda/c4k_jitsi/core.cljc

@@ -1,16 +1,15 @@
 (ns dda.c4k-jitsi.core
-  (:require
+ (:require
-   [clojure.spec.alpha :as s]
+  [clojure.spec.alpha :as s]
-   #?(:clj [orchestra.core :refer [defn-spec]]
+  #?(:clj [orchestra.core :refer [defn-spec]]
-      :cljs [orchestra.core :refer-macros [defn-spec]])
+     :cljs [orchestra.core :refer-macros [defn-spec]])
-   [dda.c4k-common.common :as cm]
+  [dda.c4k-common.common :as cm]
-   [dda.c4k-common.predicate :as cp]
+  [dda.c4k-common.predicate :as cp]
-   [dda.c4k-common.monitoring :as mon]
+  [dda.c4k-common.monitoring :as mon]
-   [dda.c4k-common.yaml :as yaml]
+  [dda.c4k-common.yaml :as yaml]
-   [dda.c4k-jitsi.jitsi :as jitsi]
+  [dda.c4k-jitsi.jitsi :as jitsi]))
-   [dda.c4k-common.namespace :as ns]))
 
-(def config-defaults {:issuer "staging", :namespace "jitsi"})
+(def config-defaults {:issuer "staging"})
 
 (s/def ::mon-cfg ::mon/mon-cfg)
 (s/def ::mon-auth ::mon/mon-auth)
@@ -24,36 +23,22 @@
                             ::jitsi/jicofo-component-secret]
                    :opt-un [::mon-auth]))
 
-(defn-spec config-objects cp/map-or-seq?
+(defn-spec k8s-objects cp/map-or-seq?
-  [config config?]
-  (map yaml/to-string
-       (filter
-        #(not (nil? %))
-        (cm/concat-vec
-         (ns/generate config)
-         [(jitsi/generate-jvb-service config)
-          (jitsi/generate-web-service config)
-          (jitsi/generate-etherpad-service config)
-          (jitsi/generate-excalidraw-backend-service config)
-          (jitsi/generate-modelector-service config)
-          (jitsi/generate-deployment config)
-          (jitsi/generate-excalidraw-deployment config)
-          (jitsi/generate-modelector-deployment config)]
-         (jitsi/generate-ingress-web config)
-         (jitsi/generate-ingress-etherpad config)
-         (jitsi/generate-ingress-excalidraw-backend config)
-         (jitsi/generate-ingress-modelector config)
-         (when (:contains? config :mon-cfg)
-           (mon/generate-config))))))
-
-(defn-spec auth-objects cp/map-or-seq?
   [config config?
    auth auth?]
   (map yaml/to-string
        (filter
         #(not (nil? %))
         (cm/concat-vec
-         [(jitsi/generate-secret-jitsi config auth)]
+         [(jitsi/generate-secret-jitsi auth)
+          (jitsi/generate-jvb-service)
+          (jitsi/generate-web-service)
+          (jitsi/generate-etherpad-service)
+          (jitsi/generate-excalidraw-backend-service)
+          (jitsi/generate-deployment config)
+          (jitsi/generate-excalidraw-deployment)]
+         (jitsi/generate-ingress-web config)
+         (jitsi/generate-ingress-etherpad config)
+         (jitsi/generate-ingress-excalidraw-backend config)
          (when (:contains? config :mon-cfg)
-           (mon/generate-auth (:mon-cfg config) (:mon-auth auth)))))))
+           (mon/generate (:mon-cfg config) (:mon-auth auth)))))))
-

src/main/cljc/dda/c4k_jitsi/jitsi.cljc

@@ -12,30 +12,28 @@
 
 (s/def ::fqdn cp/fqdn-string?)
 (s/def ::issuer cp/letsencrypt-issuer?)
-(s/def ::namespace string?)
 (s/def ::jvb-auth-password cp/bash-env-string?)
 (s/def ::jicofo-auth-password cp/bash-env-string?)
 (s/def ::jicofo-component-secret cp/bash-env-string?)
 
 (def config? (s/keys :req-un [::fqdn]
-                     :opt-un [::issuer
+                     :opt-un [::issuer]))
-                              ::namespace]))
 
-(def auth? (s/keys :req-un [::jvb-auth-password
+(def auth? (s/keys :req-un [::jvb-auth-password 
-                            ::jicofo-auth-password
+                            ::jicofo-auth-password 
                             ::jicofo-component-secret]))
-#?(:cljs
+#?(:cljs 
    (defmethod yaml/load-resource :jitsi [resource-name]
-     (get (inline-resources "jitsi") resource-name)))
+           (get (inline-resources "jitsi") resource-name)))
 
 (defn-spec generate-ingress-web cp/map-or-seq?
   [config config?]
-  (ing/generate-ingress-and-cert
+  (ing/generate-ingress-and-cert 
-   (merge
+    (merge 
-    {:service-name "web"
+     {:service-name "web" 
-     :service-port 80
+      :service-port 80
-     :fqdns [(:fqdn config)]}
+      :fqdns [(:fqdn config)]}
-    config)))
+     config)))
 
 (defn-spec generate-ingress-etherpad cp/map-or-seq?
   [config config?]
@@ -55,85 +53,37 @@
      :fqdns [(str "excalidraw-backend." (:fqdn config))]}
     config)))
 
-(defn-spec generate-ingress-modelector cp/map-or-seq?
-  [config config?]
-  (ing/generate-ingress-and-cert
-   (merge
-    {:service-name "modelector"
-     :service-port 80
-     :fqdns [(str "modelector." (:fqdn config))]}
-    config)))
-
 (defn-spec generate-secret-jitsi cp/map-or-seq?
-  [config config?
+  [auth auth?]
-   auth auth?]
+  (let [{:keys [jvb-auth-password jicofo-auth-password jicofo-component-secret]} auth]
-  (let [{:keys [namespace]} config
-        {:keys [jvb-auth-password jicofo-auth-password jicofo-component-secret]} auth]
     (->
      (yaml/from-string (yaml/load-resource "jitsi/secret.yaml"))
-     (cm/replace-all-matching "NAMESPACE" namespace)
      (cm/replace-key-value :JVB_AUTH_PASSWORD (b64/encode jvb-auth-password))
      (cm/replace-key-value :JICOFO_AUTH_PASSWORD (b64/encode jicofo-auth-password))
      (cm/replace-key-value :JICOFO_COMPONENT_SECRET (b64/encode jicofo-component-secret)))))
 
-(defn-spec generate-jvb-service cp/map-or-seq? 
+(defn-spec generate-jvb-service cp/map-or-seq? []
-  [config config?]
+  (yaml/from-string (yaml/load-resource "jitsi/jvb-service.yaml")))
-  (let [{:keys [namespace]} config]
-    (->
-     (yaml/from-string (yaml/load-resource "jitsi/jvb-service.yaml"))
-     (cm/replace-all-matching "NAMESPACE" namespace))))
 
-(defn-spec generate-web-service cp/map-or-seq?
+(defn-spec generate-web-service cp/map-or-seq? []
-  [config config?]
+  (yaml/load-as-edn "jitsi/web-service.yaml"))
-  (let [{:keys [namespace]} config]
-    (->
-     (yaml/load-as-edn "jitsi/web-service.yaml")
-     (cm/replace-all-matching "NAMESPACE" namespace))))
 
-(defn-spec generate-etherpad-service cp/map-or-seq?
+(defn-spec generate-etherpad-service cp/map-or-seq? []
-  [config config?]
+  (yaml/load-as-edn "jitsi/etherpad-service.yaml"))
-  (let [{:keys [namespace]} config]
-    (->
-     (yaml/load-as-edn "jitsi/etherpad-service.yaml")
-     (cm/replace-all-matching "NAMESPACE" namespace))))
 
-(defn-spec generate-excalidraw-backend-service cp/map-or-seq?
+(defn-spec generate-excalidraw-backend-service cp/map-or-seq? []
-  [config config?]
+  (yaml/load-as-edn "jitsi/excalidraw-backend-service.yaml"))
-  (let [{:keys [namespace]} config]
-    (->
-     (yaml/load-as-edn "jitsi/excalidraw-backend-service.yaml")
-     (cm/replace-all-matching "NAMESPACE" namespace))))
-
-(defn-spec generate-modelector-service cp/map-or-seq?
-  [config config?]
-  (let [{:keys [namespace]} config]
-    (->
-     (yaml/load-as-edn "jitsi/modelector-service.yaml")
-     (cm/replace-all-matching "NAMESPACE" namespace))))
 
 (defn-spec generate-deployment cp/map-or-seq?
   [config config?]
-  (let [{:keys [fqdn namespace]} config]
+  (let [{:keys [fqdn]} config]
     (->
      (yaml/load-as-edn "jitsi/deployment.yaml")
-     (cm/replace-all-matching "REPLACE_JITSI_FQDN" fqdn)
+     (cm/replace-all-matching-values-by-new-value "REPLACE_JITSI_FQDN" fqdn)
-     (cm/replace-all-matching "NAMESPACE" namespace)
+     (cm/replace-all-matching-values-by-new-value "REPLACE_ETHERPAD_URL"
-     (cm/replace-all-matching "REPLACE_ETHERPAD_URL"
+                                                  (str "https://etherpad." fqdn "/p/"))
-                              (str "https://etherpad." fqdn "/p/"))
+     (cm/replace-all-matching-values-by-new-value "REPLACE_EXCALIDRAW_BACKEND_URL"
-     
+                                                  (str "https://excalidraw-backend." fqdn)))))
-     (cm/replace-all-matching "REPLACE_EXCALIDRAW_BACKEND_URL"
-                              (str "https://excalidraw-backend." fqdn)))))
 
-(defn-spec generate-excalidraw-deployment cp/map-or-seq?
+(defn-spec generate-excalidraw-deployment cp/map-or-seq? []
-  [config config?]
+  (yaml/load-as-edn "jitsi/excalidraw-deployment.yaml"))
-  (let [{:keys [fqdn namespace]} config]
-    (->
-     (yaml/load-as-edn "jitsi/excalidraw-deployment.yaml")
-     (cm/replace-all-matching "NAMESPACE" namespace))))
-
-(defn-spec generate-modelector-deployment cp/map-or-seq?
-  [config config?]
-  (let [{:keys [fqdn namespace]} config]
-    (->
-     (yaml/load-as-edn "jitsi/modelector-deployment.yaml")
-     (cm/replace-all-matching "NAMESPACE" namespace))))

src/main/resources/jitsi/deployment.yaml

@@ -4,7 +4,6 @@ metadata:
   labels:
     app: jitsi
   name: jitsi
-  namespace: NAMESPACE
 spec:
   strategy:
     type: Recreate
@@ -18,7 +17,7 @@ spec:
     spec:
       containers:
         - name: jicofo
-          image: jitsi/jicofo:stable-9646
+          image: jitsi/jicofo:stable-8922-1
           imagePullPolicy: IfNotPresent
           env:
             - name: XMPP_SERVER
@@ -38,7 +37,7 @@ spec:
             - name: TZ
               value: Europe/Berlin
         - name: prosody
-          image: jitsi/prosody:stable-9646
+          image: jitsi/prosody:stable-8922-1
           imagePullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
@@ -102,10 +101,8 @@ spec:
               value: "true"
             - name: WHITEBOARD_COLLAB_SERVER_PUBLIC_URL
               value: REPLACE_EXCALIDRAW_BACKEND_URL
-            - name: COLIBRI_WEBSOCKET_REGEX
-              value: "127.0.0.1"
         - name: jvb
-          image: jitsi/jvb:stable-9646
+          image: jitsi/jvb:stable-8922-1
           imagePullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
@@ -135,7 +132,7 @@ spec:
             - name: TZ
               value: Europe/Berlin
         - name: etherpad
-          image: etherpad/etherpad:2
+          image: etherpad/etherpad:1.9.2
           env:
             - name: XMPP_SERVER
               value: localhost

src/main/resources/jitsi/etherpad-service.yaml

@@ -4,7 +4,6 @@ metadata:
   labels:
     service: etherpad
   name: etherpad
-  namespace: NAMESPACE
 spec:
   ports:
   - name: etherpad

src/main/resources/jitsi/excalidraw-backend-service.yaml

@@ -4,7 +4,6 @@ metadata:
   labels:
     service: excalidraw-backend
   name: excalidraw-backend
-  namespace: NAMESPACE
 spec:
   ports:
   - name: excalidraw-backend

src/main/resources/jitsi/excalidraw-deployment.yaml

@@ -4,7 +4,6 @@ metadata:
   labels:
     app: excalidraw-backend
   name: excalidraw-backend
-  namespace: NAMESPACE
 spec:
   strategy:
     type: Recreate

src/main/resources/jitsi/jvb-service.yaml

@@ -7,7 +7,6 @@ metadata:
     metallb.universe.tf/allow-shared-ip: "shared-ip-service-group"
     metallb.universe.tf/address-pool: public
   name: jvb-udp
-  namespace: NAMESPACE
 spec:
   type: LoadBalancer
   ports:

src/main/resources/jitsi/modelector-deployment.yaml

@@ -1,26 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  labels:
-    app: modelector
-  name: modelector
-  namespace: NAMESPACE
-spec:
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app: modelector
-  template:
-    metadata:
-      labels:
-        app: modelector
-    spec:
-      containers:
-        - name: modelector
-          image: domaindrivenarchitecture/moderator-election-vaadin_fullstack
-          imagePullPolicy: IfNotPresent
-          env:
-            - name: MEMBERNAMES
-              value: "Micha,Ansgar,Erik,Mirco"

src/main/resources/jitsi/modelector-service.yaml

@@ -1,14 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    service: modelector
-  name: modelector
-  namespace: NAMESPACE
-spec:
-  ports:
-    - name: "http"
-      port: 80
-      targetPort: 8080
-  selector:
-    app: modelector

src/main/resources/jitsi/secret.yaml

@@ -2,7 +2,6 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: jitsi-config
-  namespace: NAMESPACE
 type: Opaque
 data:
   JVB_AUTH_PASSWORD: "jvb-auth"

src/main/resources/jitsi/web-service.yaml

@@ -4,7 +4,6 @@ metadata:
   labels:
     service: web
   name: web
-  namespace: NAMESPACE
 spec:
   ports:
   - name: "http"

src/test/cljc/dda/c4k_jitsi/jitsi_test.cljc

@@ -5,18 +5,12 @@
    [clojure.spec.test.alpha :as st]
    [dda.c4k-jitsi.jitsi :as cut]))
 
-(st/instrument `cut/generate-deployment)
+(st/instrument)
-(st/instrument `cut/generate-secret-jitsi)
-(st/instrument `cut/generate-ingress-web)
-(st/instrument `cut/generate-jvb-service)
 
 (deftest should-generate-deployment
   (is (= {:apiVersion "apps/v1",
           :kind "Deployment",
-          :metadata
+          :metadata {:labels {:app "jitsi"}, :name "jitsi"},
-          {:labels {:app "jitsi"},
-           :name "jitsi"
-           :namespace "jitsi"},
           :spec
           {:strategy {:type "Recreate"},
            :selector {:matchLabels {:app "jitsi"}},
@@ -25,7 +19,7 @@
             :spec
             {:containers
              [{:name "jicofo",
-               :image "jitsi/jicofo:stable-9646",
+               :image "jitsi/jicofo:stable-8922-1",
                :imagePullPolicy "IfNotPresent",
                :env
                [{:name "XMPP_SERVER", :value "localhost"}
@@ -35,7 +29,7 @@
                 {:name "JICOFO_AUTH_PASSWORD", :valueFrom {:secretKeyRef {:name "jitsi-config", :key "JICOFO_AUTH_PASSWORD"}}}
                 {:name "TZ", :value "Europe/Berlin"}]}
               {:name "prosody",
-               :image "jitsi/prosody:stable-9646",
+               :image "jitsi/prosody:stable-8922-1",
                :imagePullPolicy "IfNotPresent",
                :env
                [{:name "PUBLIC_URL", :value "xy.xy.xy"}
@@ -66,10 +60,9 @@
                 {:name "DISABLE_AUDIO_LEVELS", :value "true"}
                 {:name "ETHERPAD_PUBLIC_URL", :value "https://etherpad.xy.xy.xy/p/"}
                 {:name "WHITEBOARD_ENABLED", :value "true"}
-                {:name "WHITEBOARD_COLLAB_SERVER_PUBLIC_URL", :value "https://excalidraw-backend.xy.xy.xy"}
+                {:name "WHITEBOARD_COLLAB_SERVER_PUBLIC_URL", :value "https://excalidraw-backend.xy.xy.xy"}]}
-                {:name "COLIBRI_WEBSOCKET_REGEX", :value "127.0.0.1"}]}
               {:name "jvb",
-               :image "jitsi/jvb:stable-9646",
+               :image "jitsi/jvb:stable-8922-1",
                :imagePullPolicy "IfNotPresent",
                :env
                [{:name "PUBLIC_URL", :value "xy.xy.xy"}
@@ -83,7 +76,7 @@
                 {:name "JICOFO_AUTH_PASSWORD", :valueFrom {:secretKeyRef {:name "jitsi-config", :key "JICOFO_AUTH_PASSWORD"}}}
                 {:name "TZ", :value "Europe/Berlin"}]}
               {:name "etherpad",
-               :image "etherpad/etherpad:2",
+               :image "etherpad/etherpad:1.9.2",
                :env
                [{:name "XMPP_SERVER", :value "localhost"}
                 {:name "JICOFO_COMPONENT_SECRET",
@@ -91,210 +84,17 @@
                 {:name "JICOFO_AUTH_USER", :value "focus"}
                 {:name "JICOFO_AUTH_PASSWORD", :valueFrom {:secretKeyRef {:name "jitsi-config", :key "JICOFO_AUTH_PASSWORD"}}}
                 {:name "TZ", :value "Europe/Berlin"}]}]}}}}
-         (cut/generate-deployment {:fqdn "xy.xy.xy"
+         (cut/generate-deployment {:fqdn "xy.xy.xy"}))))
-                                   :namespace "jitsi"}))))
 
 (deftest should-generate-secret
   (is (= {:apiVersion "v1",
           :kind "Secret",
-          :metadata 
+          :metadata {:name "jitsi-config"},
-          {:name "jitsi-config"
-           :namespace "jitsi"},
           :type "Opaque",
           :data
           {:JVB_AUTH_PASSWORD "anZiLWF1dGg=",
            :JICOFO_AUTH_PASSWORD "amljb2ZvLWF1dGg=",
            :JICOFO_COMPONENT_SECRET "amljb2ZvLWNvbXA="}}
-         (cut/generate-secret-jitsi 
+         (cut/generate-secret-jitsi {:jvb-auth-password "jvb-auth"
-          {:fqdn "xy.xy.xy"
+                                     :jicofo-auth-password "jicofo-auth"
-           :namespace "jitsi"}
+                                     :jicofo-component-secret "jicofo-comp"}))))
-          {:jvb-auth-password "jvb-auth"
-           :jicofo-auth-password "jicofo-auth"
-           :jicofo-component-secret "jicofo-comp"}))))
-                                                        
-  (deftest should-generate-ingress-web
-    (is (= [{:apiVersion "cert-manager.io/v1",
-            :kind "Certificate",
-            :metadata
-            {:name "web",
-             :labels {:app.kubernetes.part-of "web"},
-             :namespace "jitsi"},
-            :spec
-            {:secretName "web",
-             :commonName "xy.xy.xy",
-             :duration "2160h",
-             :renewBefore "720h",
-             :dnsNames ["xy.xy.xy"],
-             :issuerRef {:name "staging", :kind "ClusterIssuer"}}}
-           {:apiVersion "networking.k8s.io/v1",
-            :kind "Ingress",
-            :metadata
-            {:namespace "jitsi",
-             :annotations
-             {:traefik.ingress.kubernetes.io/router.entrypoints "web, websecure",
-              :traefik.ingress.kubernetes.io/router.middlewares
-              "default-redirect-https@kubernetescrd",
-              :metallb.universe.tf/address-pool "public"},
-             :name "web",
-             :labels {:app.kubernetes.part-of "web"}},
-            :spec
-            {:tls [{:hosts ["xy.xy.xy"], :secretName "web"}],
-             :rules
-             [{:host "xy.xy.xy",
-               :http
-               {:paths
-                [{:pathType "Prefix",
-                  :path "/",
-                  :backend {:service {:name "web", :port {:number 80}}}}]}}]}}]
-           (cut/generate-ingress-web
-            {:fqdn "xy.xy.xy"
-             :namespace "jitsi"}))))
-
-(deftest should-generate-ingress-modelector
-  (is (= [{:apiVersion "cert-manager.io/v1",
-           :kind "Certificate",
-           :metadata
-           {:name "modelector",
-            :labels {:app.kubernetes.part-of "modelector"},
-            :namespace "jitsi"},
-           :spec
-           {:secretName "modelector",
-            :commonName "modelector.xy.xy",
-            :duration "2160h",
-            :renewBefore "720h",
-            :dnsNames ["modelector.xy.xy"],
-            :issuerRef {:name "staging", :kind "ClusterIssuer"}}}
-          {:apiVersion "networking.k8s.io/v1",
-           :kind "Ingress",
-           :metadata
-           {:namespace "jitsi",
-            :annotations
-            {:traefik.ingress.kubernetes.io/router.entrypoints "web, websecure",
-             :traefik.ingress.kubernetes.io/router.middlewares
-             "default-redirect-https@kubernetescrd",
-             :metallb.universe.tf/address-pool "public"},
-            :name "modelector",
-            :labels {:app.kubernetes.part-of "modelector"}},
-           :spec
-           {:tls [{:hosts ["modelector.xy.xy"], :secretName "modelector"}],
-            :rules
-            [{:host "modelector.xy.xy",
-              :http
-              {:paths
-               [{:pathType "Prefix",
-                 :path "/",
-                 :backend {:service {:name "modelector", :port {:number 80}}}}]}}]}}]
-         (cut/generate-ingress-modelector
-          {:fqdn "xy.xy"
-           :namespace "jitsi"}))))
-
-(deftest should-generate-jvb-service
-  (is (= {:apiVersion "v1",
-          :kind "Service",
-          :metadata
-          {:labels {:service "jvb"},
-           :annotations
-           #:metallb.universe.tf{:allow-shared-ip "shared-ip-service-group",
-                                 :address-pool "public"},
-           :name "jvb-udp"
-           :namespace "jitsi"},
-          :spec
-          {:type "LoadBalancer",
-           :ports
-           [{:port 30300, :protocol "UDP", :targetPort 30300, :nodePort 30300}],
-           :selector {:app "jitsi"}}}
-         (cut/generate-jvb-service
-          {:fqdn "xy.xy.xy"
-           :namespace "jitsi"}))))
-
-(deftest should-generate-web-service
-  (is (= {:apiVersion "v1",
-          :kind "Service",
-          :metadata {:labels {:service "web"}, :name "web", :namespace "jitsi"},
-          :spec
-          {:ports
-           [{:name "http", :port 80, :targetPort 80}
-            {:name "https", :port 443, :targetPort 443}],
-           :selector {:app "jitsi"}}}
-         (cut/generate-web-service
-          {:fqdn "xy.xy.xy"
-           :namespace "jitsi"}))))
-
-(deftest should-generate-etherpad-service
-  (is (= {:apiVersion "v1",
-          :kind "Service",
-          :metadata
-          {:labels {:service "etherpad"}, :name "etherpad", :namespace "jitsi"},
-          :spec
-          {:ports [{:name "etherpad", :port 9001, :targetPort 9001}],
-           :selector {:app "jitsi"}}}
-         (cut/generate-etherpad-service
-          {:fqdn "xy.xy.xy"
-           :namespace "jitsi"}))))
-
-(deftest should-generate-excalidraw-backend-service
-  (is (= {:apiVersion "v1",
-          :kind "Service",
-          :metadata
-          {:labels {:service "excalidraw-backend"},
-           :name "excalidraw-backend",
-           :namespace "jitsi"},
-          :spec
-          {:ports [{:name "excalidraw-backend", :port 3002, :targetPort 80}],
-           :selector {:app "excalidraw-backend"}}}
-         (cut/generate-excalidraw-backend-service
-          {:fqdn "xy.xy.xy"
-           :namespace "jitsi"}))))
-
-(deftest should-generate-modelector-service
-  (is (= {:apiVersion "v1",
-          :kind "Service",
-          :metadata
-          {:labels {:service "modelector"},
-           :name "modelector",
-           :namespace "jitsi"},
-          :spec
-          {:ports [{:name "http", :port 80, :targetPort 8080}],
-           :selector {:app "modelector"}}}
-         (cut/generate-modelector-service
-          {:fqdn "xy.xy.xy"
-           :namespace "jitsi"}))))
-
-(deftest should-generate-modelector-deployment
-  (is (= {:apiVersion "apps/v1",
-          :kind "Deployment",
-          :metadata
-          {:labels {:app "modelector"},
-           :name "modelector",
-           :namespace "jitsi"},
-          :spec
-          {:selector {:matchLabels {:app "modelector"}},
-           :replicas 1,
-           :strategy {:type "Recreate"},
-           :template
-           {:metadata {:labels {:app "modelector"}},
-            :spec
-            {:containers
-             [{:name "modelector",
-               :image "domaindrivenarchitecture/moderator-election-vaadin_fullstack",
-               :imagePullPolicy "IfNotPresent",
-               :env
-               [{:name "MEMBERNAMES",
-                 :value "Micha,Ansgar,Erik,Mirco"}]}]}}}}
-          (cut/generate-modelector-deployment
-           {:fqdn "xy.xy.xy"
-            :namespace "jitsi"}))))
-
-(deftest should-generate-excalidraw-deployment
-  (is (= {:apiVersion "v1",
-          :kind "Service",
-          :metadata
-          {:labels {:service "excalidraw-backend"},
-           :name "excalidraw-backend",
-           :namespace "jitsi"},
-          :spec
-          {:ports [{:name "excalidraw-backend", :port 3002, :targetPort 80}],
-           :selector {:app "excalidraw-backend"}}}
-         (cut/generate-excalidraw-backend-service
-          {:fqdn "xy.xy.xy"
-           :namespace "jitsi"}))))