different nextcloud aio solution

2026-07-30 09:05:37 +02:00
parent da5ee4a161
commit 6795e1979d
3 changed files with 42 additions and 180 deletions
@@ -42,26 +42,22 @@ fail2ban_dir: "/etc/fail2ban"

 nc_talk_hpb_domain: "talk-hpb.cloud.example.com"

-# Where the NATS/Janus/Signaling Docker Compose stack and its config live on the HPB host.
+# Where the Nextcloud AIO Talk Docker Compose stack and its config live on the HPB host.
 nc_talk_hpb_install_dir: "/opt/hpb"

 # Talk HPB TLS certificate paths (used by the Apache reverse proxy).
 nc_talk_hpb_ssl_cert: "/etc/ssl/certs/nc-talk-hpb-selfsigned.crt"
 nc_talk_hpb_ssl_key:  "/etc/ssl/private/nc-talk-hpb-selfsigned.key"

-# UDP port range Janus uses for WebRTC media (RTP). Must also be reachable through the firewall.
-nc_talk_hpb_rtp_port_range: "20000-40000"
+# Timezone used inside the Talk HPB container.
+nc_talk_hpb_timezone: "Europe/Berlin"

-# Admin key for the Janus VideoRoom plugin (lets the signaling server manage rooms via the admin API).
-nc_talk_hpb_janus_admin_key: "ChangeMe1234_"
-
-# Shared secrets for the signaling server. Generate each with the given command and paste the result here.
-# turn/signaling/hash: openssl rand -hex 32   (64 hex chars)
-# block:               openssl rand -hex 16   (32 hex chars — MUST be exactly 32, 48 or 64 hex chars or the signaling server refuses to start)
+# Shared secrets for the Nextcloud AIO Talk container. Generate each with the given
+# command and paste the result here (min. 24 chars, better 32).
+# turn/signaling/internal: openssl rand -hex 32
 nc_talk_hpb_turn_secret: "ChangeMe_RunOpensslRandHex32"
 nc_talk_hpb_signaling_secret: "ChangeMe_RunOpensslRandHex32"
-nc_talk_hpb_hash_key: "ChangeMe_RunOpensslRandHex32"
-nc_talk_hpb_block_key: "ChangeMe_RunOpensslRandHex16"
+nc_talk_hpb_internal_secret: "ChangeMe_RunOpensslRandHex32"

 ########################################
 # Collabora CODE