fix: remove E2E support in jitsi
This commit is contained in:
@@ -39,9 +39,15 @@ in
|
|||||||
};
|
};
|
||||||
|
|
||||||
config = lib.mkIf cfg.enable {
|
config = lib.mkIf cfg.enable {
|
||||||
nixpkgs.config.permittedInsecurePackages = [
|
nixpkgs.overlays = [
|
||||||
"jitsi-meet-1.0.7952"
|
(_: prev: {
|
||||||
|
# We disable E2E for clients below
|
||||||
|
jitsi-meet = prev.jitsi-meet.overrideAttrs (old: {
|
||||||
|
meta = old.meta // { knownVulnerabilities = [ ]; };
|
||||||
|
});
|
||||||
|
})
|
||||||
];
|
];
|
||||||
|
|
||||||
services.jitsi-meet = {
|
services.jitsi-meet = {
|
||||||
enable = true;
|
enable = true;
|
||||||
hostName = "${cfg.subdomain}.${domain}";
|
hostName = "${cfg.subdomain}.${domain}";
|
||||||
@@ -55,6 +61,7 @@ in
|
|||||||
prejoinConfig = {
|
prejoinConfig = {
|
||||||
enabled = true;
|
enabled = true;
|
||||||
};
|
};
|
||||||
|
e2ee.disabled = true; # libolm is vulnerable and E2E is generally broken.
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
services.prosody.extraConfig = ''
|
services.prosody.extraConfig = ''
|
||||||
|
Reference in New Issue
Block a user