WIP

@@ -0,0 +1,205 @@
+---
+# tasks file for jitsimeet install
+
+- name: Set FQDN

@@ -0,0 +5,4 @@
+  command: "hostnamectl set-hostname {{ domains | first }}"
+
+- name: Add Prosody apt repository key
+  ansible.builtin.get_url:

@@ -0,0 +12,4 @@
+    force: true
+
+- name: Add Jitsi Meet apt repository key + dearmor hack
+  shell: curl -sL https://download.jitsi.org/jitsi-key.gpg.key | sh -c 'gpg --dearmor > /etc/apt/trusted.gpg.d/jitsimeet.gpg'

@@ -0,0 +16,4 @@
+
+- name: Add Prosody apt repository
+  ansible.builtin.apt_repository:
+    repo: "deb [signed-by=/etc/apt/trusted.gpg.d/prosody.gpg] https://packages.prosody.im/debian {{ ansible_distribution_release }} main"

@@ -0,0 +102,4 @@
+- name: Add bloc to jicofo.conf to disable sctp
+  ansible.builtin.blockinfile:
+    path: /etc/jitsi/jicofo/jicofo.conf
+    marker: "# {mark} ANSIBLE MANAGED BLOCK"

@@ -0,0 +110,4 @@
+        }
+
+- name: Unregister default jvb account in prosody
+  ansible.builtin.command: prosodyctl unregister jvb auth.{{ domains | first }}

@@ -0,0 +116,4 @@
+  ansible.builtin.command: prosodyctl register jvb auth.{{ domains | first }} {{ jitsi_meet_jvb_secret }}
+
+- name: Restart prosody
+  ansible.builtin.service:

@@ -0,0 +118,4 @@
+- name: Restart prosody
+  ansible.builtin.service:
+    name: prosody
+    state: restarted

@@ -0,0 +146,4 @@
+      src: "/etc/nginx/sites-available/{{ domains |first }}.conf"
+      dest: "/etc/nginx/sites-enabled/{{ domains |first }}.conf"
+      state: link
+  - name: Reload nginx conf

@@ -0,0 +156,4 @@
+      state: directory
+      mode: '0755'
+  - name: Generate certificate with certbot
+    shell: certbot certonly --webroot --webroot-path /var/lib/letsencrypt --non-interactive --agree-tos --email {{ certbot_admin_email }} -d {{ domains |first }}

@@ -0,0 +172,4 @@
+    - { src: 'nginx/vhost.conf.j2', dest: "/etc/nginx/sites-available/{{ domains |first }}.conf" }
+    - { src: 'nginx/multiplex.conf.j2', dest: '/etc/nginx/modules-available/multiplex.conf' }
+
+- name: Enable multiplex module conf

@@ -0,0 +178,4 @@
+    dest: '/etc/nginx/modules-enabled/multiplex.conf'
+    state: link
+
+- name: Enable nginx vhost

@@ -0,0 +184,4 @@
+    dest: "/etc/nginx/sites-enabled/{{ domains |first }}.conf"
+    state: link
+
+- name: Reload nginx conf

@@ -0,0 +195,4 @@
+  register: ssl_coturn
+
+- name: Generate certificate for coturn with certbot
+  shell: certbot certonly --webroot --webroot-path /var/lib/letsencrypt --non-interactive --deploy-hook /etc/letsencrypt/renewal-hooks/deploy/coturn-certbot-deploy.sh --agree-tos --email {{ certbot_admin_email }} -d {{ turn_domains |first }}

@@ -0,0 +1,71 @@
+---
+# tasks file for other domains if any
+
+- name: Template config files

@@ -0,0 +15,4 @@
+- name: Check if SSL certificate is present and register result
+  stat:
+    path: "/etc/letsencrypt/live/{{ domain }}/fullchain.pem"
+  register: ssl

@@ -0,0 +25,4 @@
+                        "$daemon_cert_root/$domain.key"
+
+                service coturn restart >/dev/null
+                ;;