forked from External/greenlight
* Fix wrong conditional (reported by LGTM) (#1477) Signed-off-by: Stefan Weil <sw@weilnetz.de> Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com> * Bump rack from 2.2.2 to 2.2.3 (#1839) Bumps [rack](https://github.com/rack/rack) from 2.2.2 to 2.2.3. - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/master/CHANGELOG.md) - [Commits](https://github.com/rack/rack/compare/v2.2.2...2.2.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * [FIX] Unable to edit long recording names #1776 (#1780) * Allow to set a filter for LDAP authentication * [FIX] Unable to edit long recording names #1776 Co-authored-by: François Ménabé <francois.menabe@unistra.fr> Co-authored-by: farhatahmad <ahmad.af.farhat@gmail.com> * Desgin for Manage Users Tabs (#1777) * Update _subtitle.html.erb * Update _manage_users_tags.html.erb * Update admins.scss * Update _primary_themes.scss * Update _manage_users_tags.html.erb * Minor style changes to manage users (#1845) * Maintenance banner moved to admin site (#1775) * initial * finish * travis fixes * travis again * not required * Co-authored-by: Tobias Fiebig <t.fiebig@tudelft.nl> (#1296) Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com> * Enhance Room OpenGraph Metadata (#1601) * Revert "Enhance Room OpenGraph Metadata (#1601)" (#1852) This reverts commit 3b007c233ae12e0407f216ae269c63d6179f73b8. * GRN2-xx: Tab title now displays the current page name (#1853) * Tab title now displays the current page name * Added page title for the rest of the pages * Split Site Settings into 3 different tabs (#1858) * Split Site Settings into 3 different tabs * Fix copyright * Added redirect to correct tab * Make sure settings are displaying when they should * Update en.yml (#1857) * Build images for alpha branches (#1867) * Upgraded jquery to latest version (#1896) * Added favicon tag (#1898) * Fixed XSS issue with role name (#1899) * Update path for coloring redirect (#1908) * Added a fourth section to the room uid (#1910) * Fixed issue with insecure room sharing removal (#1914) * Fixes typo (#1917) Fixes typo: successfully was written incorrect. * Fixed order of rooms in server rooms (#1915) * Change default room sort to latest activity (#1919) * GRN2-xx: Small changes/improvements to the recording settings (#1851) * Small changes/improvements to the recording settings * Replaced room warning with info flash * Added global setting to enable/disable the recording consent feature * Replace Legal with Terms (#1931) * Added a more friendly OpenGraph description when invited to join a room (#1932) * Fixed issue causing maintenance banner not to hide correctly (#1933) * Hide recording menu and recording list when it is disabled (#1935) * Hide recording menu and recording list when it is disabled * Hide recording list when disabled * GRN2-xx: Added an auto-refresh after 2 mins while waiting for room to start (#1947) * Added an auto-refresh after 2 mins while waiting for room to start * Fixed random issue with test case * GRN2-xx: Added ability to preupload presentations to rooms (#1895) * Added ability to preupload presentations to rooms (#1868) * Added setting to site settings and allowed admins to change the presentation * Added AWS S3 and GCS Storage ENV variables * Added check to ensure file extension is correct * Added icon to remove presentation * Added testcases for preupload * Add nginx redirect to solve issue with relative root * Record title, instead of room name, in the popup (#1924) * Update _public_recording_row.html.erb * Update _recording_row.html.erb Co-authored-by: Stefan Weil <sw@weilnetz.de> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: beckerr-rzht <beckerr@hochschule-trier.de> Co-authored-by: François Ménabé <francois.menabe@unistra.fr> Co-authored-by: MrKeksi <mrkeksi@users.noreply.github.com> Co-authored-by: yanosz <yanosz@users.noreply.github.com> Co-authored-by: Moritz Schlarb <moschlar@metalabs.de> Co-authored-by: chronikum <34622984+chronikum@users.noreply.github.com> Co-authored-by: Mitsutaka Sato <miztaka@honestyworks.jp> Co-authored-by: hiroshisuga <45039819+hiroshisuga@users.noreply.github.com>
282 lines
8.9 KiB
Bash
282 lines
8.9 KiB
Bash
# Create a Secret Key for Rails
|
|
#
|
|
# You can generate a secure one through the Greenlight docker image
|
|
# with the command.
|
|
#
|
|
# docker run --rm bigbluebutton/greenlight:v2 bundle exec rake secret
|
|
#
|
|
SECRET_KEY_BASE=
|
|
|
|
# The endpoint and secret for your BigBlueButton server.
|
|
# Set these if you are running GreenLight on a single BigBlueButton server.
|
|
# You can retrive these by running the following command on your BigBlueButton server:
|
|
#
|
|
# bbb-conf --secret
|
|
#
|
|
BIGBLUEBUTTON_ENDPOINT=
|
|
BIGBLUEBUTTON_SECRET=
|
|
|
|
# The hostname that the application is accessible from.
|
|
#
|
|
# Used to protect against various HTTP header attacks
|
|
# Should be in the form of "domain.com"
|
|
#
|
|
SAFE_HOSTS=
|
|
|
|
# Google Login Provider (optional)
|
|
#
|
|
# For in-depth steps on setting up a Google Login Provider, see:
|
|
#
|
|
# https://docs.bigbluebutton.org/greenlight/gl-config.html#google-oauth2
|
|
#
|
|
# The GOOGLE_OAUTH2_HD variable is used to limit sign-ins to a particular set of Google Apps hosted
|
|
# domains. This can be a string with separating commas such as, 'domain.com, example.com' or
|
|
# a string that specifies a single domain restriction such as, 'domain.com'.
|
|
# If left blank, GreenLight will allow sign-in from all Google Apps hosted domains.
|
|
GOOGLE_OAUTH2_ID=
|
|
GOOGLE_OAUTH2_SECRET=
|
|
GOOGLE_OAUTH2_HD=
|
|
|
|
# Twitter Login Provider (optional)
|
|
#
|
|
# Twitter Authentication is deprecated and will be phased out in a future release.
|
|
|
|
# Microsoft Office365 Login Provider (optional)
|
|
#
|
|
# For in-depth steps on setting up a Office 365 Login Provider, see:
|
|
#
|
|
# https://docs.bigbluebutton.org/greenlight/gl-config.html#office365-oauth2
|
|
#
|
|
OFFICE365_KEY=
|
|
OFFICE365_SECRET=
|
|
OFFICE365_HD=
|
|
|
|
# OAUTH2_REDIRECT allows you to specify the redirect_url passed to oauth on sign in.
|
|
# It is useful for cases when Greenlight is deployed behind a Network Load Balancer or proxy
|
|
OAUTH2_REDIRECT=
|
|
|
|
# LDAP Login Provider (optional)
|
|
#
|
|
# You can enable LDAP authentication by providing values for the variables below.
|
|
# Configuring LDAP authentication will take precedence over all other providers.
|
|
# For information about setting up LDAP, see:
|
|
#
|
|
# https://docs.bigbluebutton.org/greenlight/gl-config.html#ldap-auth
|
|
#
|
|
# LDAP_SERVER=ldap.example.com
|
|
# LDAP_PORT=389
|
|
# LDAP_METHOD=plain
|
|
# LDAP_UID=uid
|
|
# LDAP_BASE=dc=example,dc=com
|
|
# LDAP_AUTH=simple
|
|
# LDAP_BIND_DN=cn=admin,dc=example,dc=com
|
|
# LDAP_PASSWORD=password
|
|
# LDAP_ROLE_FIELD=ou
|
|
# LDAP_FILTER=(&(attr1=value1)(attr2=value2))
|
|
# LDAP_ATTRIBUTE_MAPPING=name=displayName;uid=uid; (See link above for more details)
|
|
LDAP_SERVER=
|
|
LDAP_PORT=
|
|
LDAP_METHOD=
|
|
LDAP_UID=
|
|
LDAP_BASE=
|
|
LDAP_BIND_DN=
|
|
LDAP_AUTH=
|
|
LDAP_PASSWORD=
|
|
LDAP_ROLE_FIELD=
|
|
LDAP_FILTER=
|
|
LDAP_ATTRIBUTE_MAPPING=
|
|
|
|
# Set this to true if you want GreenLight to support user signup and login without
|
|
# Omniauth. For more information, see:
|
|
#
|
|
# https://docs.bigbluebutton.org/greenlight/gl-overview.html#accounts-and-profile
|
|
#
|
|
ALLOW_GREENLIGHT_ACCOUNTS=true
|
|
|
|
# To enable reCaptcha on the user sign up, define these 2 keys
|
|
# You can obtain these keys by registering your domain using the following url:
|
|
#
|
|
# https://www.google.com/recaptcha/admin
|
|
#
|
|
RECAPTCHA_SITE_KEY=
|
|
RECAPTCHA_SECRET_KEY=
|
|
|
|
# To enable Google Analytics on your site, set this key to the Google Analytics Property Tracking ID
|
|
#
|
|
# https://analytics.google.com/analytics/web/
|
|
#
|
|
GOOGLE_ANALYTICS_TRACKING_ID=
|
|
|
|
# Set this to true if you want GreenLight to send verification emails upon
|
|
# the creation of a new account
|
|
#
|
|
# ALLOW_MAIL_NOTIFICATIONS=true
|
|
#
|
|
# The notifications are sent using sendmail, unless the SMTP_SERVER variable is set.
|
|
# In that case, make sure the rest of the variables are properly set.
|
|
#
|
|
# SMTP_SERVER=smtp.gmail.com
|
|
# SMTP_PORT=587
|
|
# SMTP_DOMAIN=gmail.com
|
|
# SMTP_USERNAME=<youremail@gmail.com>
|
|
# SMTP_PASSWORD=<yourpassword>
|
|
# SMTP_AUTH=plain
|
|
# SMTP_STARTTLS_AUTO=true
|
|
#
|
|
# If your mail server has a self-signed certificate, you'll also need to include the line below.
|
|
# Please note that enable this presents its own security risks and should not be done unless necessary.
|
|
# SMTP_OPENSSL_VERIFY_MODE=none
|
|
#
|
|
SMTP_SERVER=
|
|
SMTP_PORT=
|
|
SMTP_DOMAIN=
|
|
SMTP_USERNAME=
|
|
SMTP_PASSWORD=
|
|
SMTP_AUTH=
|
|
SMTP_STARTTLS_AUTO=
|
|
|
|
# Specify the email address that all mail is sent from
|
|
SMTP_SENDER=
|
|
|
|
# Prefix for the applications root URL.
|
|
# Useful for deploying the application to a subdirectory, which is highly recommended
|
|
# if deploying on a BigBlueButton server. Keep in mind that if you change this, you'll
|
|
# have to update your authentication callback URL's to reflect this change.
|
|
#
|
|
# The recommended prefix is "/b".
|
|
#
|
|
RELATIVE_URL_ROOT=/b
|
|
|
|
# Specify which settings you would like the users to configure on room creation
|
|
# or edit after the room has been created
|
|
# By default, all settings are turned OFF.
|
|
#
|
|
# Current settings available:
|
|
# mute-on-join: Automatically mute users by default when they join a room
|
|
# require-moderator-approval: Require moderators to approve new users before they can join the room
|
|
# anyone-can-start: Allows anyone with the join url to start the room in BigBlueButton
|
|
# all-join-moderator: All users join as moderators in BigBlueButton
|
|
# recording: Sessions are recorded
|
|
ROOM_FEATURES=mute-on-join,require-moderator-approval,anyone-can-start,all-join-moderator,recording
|
|
|
|
# Specify the maximum number of records to be sent to the BigBlueButton API in one call
|
|
# Default is set to 25 records
|
|
PAGINATION_NUMBER=25
|
|
|
|
# Specify the maximum number of rows that should be displayed per page for a paginated table
|
|
# Default is set to 25 rows
|
|
NUMBER_OF_ROWS=25
|
|
|
|
# Specify if you want to display the Google Calendar button
|
|
# ENABLE_GOOGLE_CALENDAR_BUTTON=true|false
|
|
ENABLE_GOOGLE_CALENDAR_BUTTON=
|
|
|
|
# Set the application into Maintenance Mode
|
|
#
|
|
# Current options supported:
|
|
# true: Renders an error page that does not allow users to access any of the features in the application
|
|
# false: Application runs normally
|
|
MAINTENANCE_MODE=false
|
|
|
|
# Displays a flash that appears to inform the user of a scheduled maintenance window
|
|
# This variable should contain ONLY the date and time of the scheduled maintenance
|
|
#
|
|
# Ex: MAINTENANCE_WINDOW=Friday August 18 6pm-10pm EST
|
|
MAINTENANCE_WINDOW=
|
|
|
|
# The link to the Report an Issue button that appears on the 500 page and in the Account Dropdown
|
|
#
|
|
# Defaults to the Github Issues Page for Greenlight
|
|
# Button can be disabled by setting the value to blank
|
|
#
|
|
# REPORT_ISSUE_URL=https://github.com/bigbluebutton/greenlight/issues/new
|
|
|
|
# The link to the Need help? button that appears on the Account Dropdown
|
|
#
|
|
# Defaults to the Greenlight documentation
|
|
# Button can be disabled by setting the value to blank
|
|
HELP_URL=https://docs.bigbluebutton.org/greenlight/gl-overview.html
|
|
|
|
# Comment this out to send logs to STDOUT in production instead of log/production.log .
|
|
#
|
|
# RAILS_LOG_TO_STDOUT=true
|
|
#
|
|
# When using docker-compose the logs can be sent to an centralized repository like PaperTrail
|
|
# just by using the built in driver. Make sure to add to docker-compose.yml the next lines:
|
|
#
|
|
# logging:
|
|
# driver: $LOG_DRIVER
|
|
# options:
|
|
# syslog-address: $LOG_ADDRESS
|
|
# tag: $LOG_TAG
|
|
#
|
|
# And set this variables up:
|
|
#
|
|
# LOG_DRIVER=syslog
|
|
# LOG_ADDRESS=udp://logs4.papertrailapp.com:[99999]
|
|
# LOG_TAG=greenlight.example.com:v2
|
|
#
|
|
# Check docker-compose and papertrail documentation for encrypting and
|
|
# protecting access to the log repository.
|
|
# https://docs.docker.com/config/containers/logging/syslog/#options
|
|
# https://help.papertrailapp.com/kb/configuration/encrypting-remote-syslog-with-tls-ssl/
|
|
#
|
|
# For sending logs to a remote aggregator enable these variables:
|
|
#
|
|
# RAILS_LOG_REMOTE_NAME=logxx.papertrailapp.com
|
|
# RAILS_LOG_REMOTE_PORT=9999
|
|
# RAILS_LOG_REMOTE_TAG=greenlight
|
|
#
|
|
# Force SSL
|
|
#
|
|
# ENABLE_SSL=true
|
|
|
|
# Database settings
|
|
#
|
|
# Greenlight may work out of the box with sqlite3, but for production it is recommended to use postgresql.
|
|
# In such case, these variables must be included.
|
|
#
|
|
# DB_ADAPTER=postgresql
|
|
# DB_HOST=postgres.example.com
|
|
# DB_PORT=5432
|
|
# DB_NAME=greenlight_production
|
|
# DB_USERNAME=postgres
|
|
# DB_PASSWORD=password
|
|
#
|
|
# For deployments based on the docker-compose script also included, the HOST should be set with the Docker container id.
|
|
#
|
|
DB_ADAPTER=postgresql
|
|
DB_HOST=db
|
|
DB_PORT=5432
|
|
DB_NAME=greenlight_production
|
|
DB_USERNAME=postgres
|
|
DB_PASSWORD=password
|
|
|
|
# Specify the default registration to be used by Greenlight until an administrator sets the
|
|
# registration method
|
|
# Allowed values are:
|
|
# open - For open registration
|
|
# invite - For invite only registration
|
|
# approval - For approve/decline registration
|
|
DEFAULT_REGISTRATION=open
|
|
|
|
# Preupload Presentation Storage
|
|
#
|
|
# By default, if Preupload Presentation is enabled for rooms, presentations are uploaded locally to ~/greenlight/storage
|
|
# If you prefer to use AWS S3 or GCS Storage, you can set the variables below
|
|
#
|
|
# For AWS S3:
|
|
# AWS_ACCESS_KEY_ID=
|
|
# AWS_SECRET_ACCESS_KEY=
|
|
# AWS_REGION=
|
|
# AWS_BUCKET=
|
|
#
|
|
# For GCS Storage:
|
|
# GCS_PROJECT_ID=
|
|
# GCS_PRIVATE_KEY_ID=
|
|
# GCS_PRIVATE_KEY=
|
|
# GCS_CLIENT_EMAIL=
|
|
# GCS_CLIENT_ID=
|
|
# GCS_CLIENT_CERT=
|
|
# GCS_PROJECT=
|
|
# GCS_BUCKET= |