Update to 2024-07-22 23:00

roles/jitsi/templates/jitsi-excalidraw.service.j2

@@ -0,0 +1,24 @@
+[Unit]
+Description=Jitsi Whiteboard backend
+
+[Service]
+Type=simple
+User={{ jitsi_user }}
+Group={{ jitsi_user }}
+Environment=PORT=3018
+Environment=NODE_ENV=production
+WorkingDirectory={{ jitsi_root_dir }}/excalidraw
+ExecStart=/bin/npm start
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=full
+ProtectHome=yes
+NoNewPrivileges=yes
+SyslogIdentifier=jitsi-excalidraw
+Restart=on-failure
+StartLimitInterval=0
+RestartSec=30
+
+[Install]
+WantedBy=multi-user.target
+

roles/jitsi/templates/jitsi-jicofo.service.j2

@@ -15,6 +15,8 @@ ReadOnlyDirectories={{ jitsi_root_dir }}/etc {{ jitsi_root_dir }}/jicofo
 Restart=on-failure
 StartLimitInterval=0
 RestartSec=30
+Environment=JAVA_HOME=/usr/lib/jvm/java-17
+Environment=PATH=/usr/lib/jvm/java-17/bin:/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin
 Environment=JAVA_SYS_PROPS=-Dconfig.file={{ jitsi_root_dir }}/etc/jicofo/jicofo.conf
 ExecStart=/opt/jitsi/jicofo/jicofo.sh \
             ${JICOFO_OPT}

roles/jitsi/templates/jitsi-jigasi.service.j2

@@ -15,6 +15,8 @@ ProtectSystem=full
 Restart=on-failure
 StartLimitInterval=0
 RestartSec=30
+Environment=JAVA_HOME=/usr/lib/jvm/java-17
+Environment=PATH=/usr/lib/jvm/java-17/bin:/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin
 ExecStart=/opt/jitsi/jigasi/jigasi.sh \
             --configdir={{ jitsi_root_dir }}/etc \
             --configdirname=jigasi \

roles/jitsi/templates/nginx.conf.j2

@@ -26,6 +26,14 @@ server {
     # TODO : rate limit these endpoints to prevent room listing
   }
 
+  # Excalidraw
+  location /socket.io {
+    proxy_pass http://localhost:3018;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "upgrade";
+  }
+
   # BOSH endpoint
   location /http-bind {
     proxy_socket_keepalive on;

roles/jitsi/templates/prosody.cfg.lua.j2

@@ -1,4 +1,6 @@
 
+plugin_paths = { "{{ jitsi_root_dir }}/prosody/modules" }
+
 muc_mapper_domain_base = "{{ jitsi_domain }}";
 admins = { "{{ jitsi_jicofo_xmpp_user }}@{{ jitsi_auth_domain }}" };
 http_default_host = "{{ jitsi_domain }}";