blob: 08a7ebb1d960e2b4fcb312cceec49a746437583b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
### LaSuite Meet configuration
# This is an incomplete list of configuration variables containing those you
# might usually want to set for a deployment. For the full list,
# see the documentation at
# <https://documentation-meet.beta.numerique.gouv.fr/reference/env-variables/>.
## Base application settings
#
# The Django application configuration. One of ‘Development’, ‘Test’,
# ‘ContinuousIntegration’, ‘Production’.
DJANGO_CONFIGURATION=Production
# Comma-separated list of hosts (DNS names or IP addresses) to allow to
# connect to the server.
DJANGO_ALLOWED_HOSTS=localhost
# The Django secret application key used for cryptographic signing. Can be
# either set inline (via DJANGO_SECRET_KEY) or loaded from another file
# (via DJANGO_SECRET_KEY_FILE). Must be set to a 50+ character random string
# before running the application.
# The secret key can be generated by running this command.
#
# python3 -c 'import secrets; print(secrets.token_hex())'
#
# If DJANGO_SECRET_KEY_FILE is a relative path, it is interpreted relative to
# the working directory (using the supplied systemd service, by default,
# /var/lib/lasuite-meet).
#DJANGO_SECRET_KEY=
DJANGO_SECRET_KEY_FILE=SecretKey
# The socket to bind the HTTP server to. Will be passed to
# gunicorn’s --bind option. The default is ‘unix:/run/lasuite-meet/http.sock’.
#HTTP_BIND=unix:/run/lasuite-meet/http.sock
#HTTP_BIND=127.0.0.1:8000
# How many worker processes to spawn. The default is 1.
#WEB_CONCURRENCY=1
## PostgreSQL database settings
#
DB_HOST=/run/postgresql
#DB_PORT=5432
DB_NAME=lasuite-meet
DB_USER=lasuite-meet
#DB_PASSWORD=
## Redis database settings
REDIS_URL=redis://localhost:6379/0
## Celery settings
#
# Whether to enable the Celery task queue. Currently used for asynchronously
# cleaning up uploaded files (FILE_UPLOAD_ENABLED). When this is enabled, also
# start the Celery broker service (note: this service is not supplied by the
# package yet). The default is ‘False’.
#CELERY_ENABLED=False
# The Redis database URL to use for Celery.
CELERY_BROKER_URL=redis://localhost:6379/1
## LiveKit settings
# LaSuite Meet uses the LiveKit WebRTC stack for audio/video
# streaming.
#
# The public URL to the LiveKit API endpoint.
#LIVEKIT_API_URL=https://livekit.knifepoint.net/
# The LiveKit API application key.
#LIVEKIT_API_KEY=lasuite-meet
# The secret belonging to the application key.
#LIVEKIT_API_SECRET=
## Authentication settings
# LaSuite Meet uses OpenID Connect as its authentication backend.
#
#OIDC_RP_CLIENT_ID=lasuite-meet
#OIDC_RP_CLIENT_SECRET=
# The OpenID scopes to request from the identity provider.
# The default is ‘openid email’.
OIDC_RP_SCOPES=openid email profile
# The OIDC token signing algorithm. The default is ‘RS256’.
OIDC_RP_SIGN_ALGO=ES256
#OIDC_OP_AUTHORIZATION_ENDPOINT=
#OIDC_OP_JWKS_ENDPOINT=
#OIDC_OP_TOKEN_ENDPOINT=
#OIDC_OP_USER_ENDPOINT=
# Whether to require the identity provider to supply a HTTPS redirect URI.
# The default is ‘False’.
OIDC_REDIRECT_REQUIRE_HTTPS=True
# Whether to use PKCE. Some identity providers such as Kanidm will not allow
# requests without PKCE for security reasons. The default is ‘False’.
OIDC_USE_PKCE=True
#OIDC_CREATE_USER=True
#LOGIN_REDIRECT_URL=
#LOGIN_REDIRECT_URL_FAILURE=
# Whether to allow unauthenticated room creation. By default, it is possible
# for unauthenticated users to create rooms by making up a free meeting ID.
# It is therefore advised to set this to ‘False’ when authentication is
# desired. The default is ‘True’.
#ALLOW_UNREGISTERED_ROOMS=True
|
