about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorlassulus <github@lassul.us>2024-03-29 22:29:12 +0100
committerGitHub <noreply@github.com>2024-03-29 22:29:12 +0100
commit387ef8710bf6ec095dea0829462f3d76a8a7f31f (patch)
tree6e5455f7f855086c408419c1e374c171370e13d4 /nixos
parent33ad5978bc1946ff85e8471e6a73ecd01e6f2f17 (diff)
parentf553bdbb07743d06c73c68bee31db4520ab0c435 (diff)
Merge pull request #277387 from traxys/jitsi_pam
nixos/jitsi-meet: allow to customize jitsi auth
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/web-apps/jitsi-meet.nix11
1 files changed, 9 insertions, 2 deletions
diff --git a/nixos/modules/services/web-apps/jitsi-meet.nix b/nixos/modules/services/web-apps/jitsi-meet.nix
index c4505534d635e..f907aa68f55e1 100644
--- a/nixos/modules/services/web-apps/jitsi-meet.nix
+++ b/nixos/modules/services/web-apps/jitsi-meet.nix
@@ -188,7 +188,14 @@ in
       description = lib.mdDoc ''The port which the Excalidraw backend for Jitsi should listen to.'';
     };
 
-    secureDomain.enable = mkEnableOption (lib.mdDoc "Authenticated room creation");
+    secureDomain = {
+      enable = mkEnableOption (lib.mdDoc "Authenticated room creation");
+      authentication = mkOption {
+        type = types.str;
+        default = "internal_hashed";
+        description = lib.mdDoc ''The authentication type to be used by jitsi'';
+      };
+    };
   };
 
   config = mkIf cfg.enable {
@@ -309,7 +316,7 @@ in
         enabled = true;
         domain = cfg.hostName;
         extraConfig = ''
-          authentication = ${if cfg.secureDomain.enable then "\"internal_hashed\"" else "\"jitsi-anonymous\""}
+          authentication = ${if cfg.secureDomain.enable then "\"${cfg.secureDomain.authentication}\"" else "\"jitsi-anonymous\""}
           c2s_require_encryption = false
           admins = { "focus@auth.${cfg.hostName}" }
           smacks_max_unacked_stanzas = 5