mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-10-10 10:48:10 +02:00

Files

Kevin Veen-Birkenbach 6ea0d09f14 bbb: WIP—stabilize env/compose wiring & prep SFU override

Context: debugging mediasoup/WebRTC failures caused by empty/interpolated vars (EXTERNAL_IPv4, etc.).
- Normalize config/main.yml (ip6_enabled flag, enable greenlight/coturn) and tidy formatting.
- Extend vars/main.yml with BBB_* switches (IPv6, Greenlight, Coturn), TURN/Coturn cert paths.
- env.j2: wire secrets & toggles, guard IPv6 via BBB_IP6_ENABLED, switch LDAP/OIDC to role flags, add TURN/STUN, and general cleanup.
- tasks/main.yml: use BBB_* fact names, robust path joins, write docker-compose.override.yml, and notify compose on env/override changes.
- tasks/01_docker-compose.yml: reference new BBB_DOCKER_COMPOSE_* facts.
- Add templates/docker-compose.override.yml.j2 (placeholder for SFU overrides to avoid bad defaults during runs).
Rationale: make Compose brings deterministic (no empty ), paving the way to set MS_WEBRTC_LISTEN_IPS in override without risk.

Chat reference: debugging thread with GPT-5 Thinking on 2025-09-26 https://chatgpt.com/share/68d59d98-4388-800f-a627-07b6a603d0b2.

2025-09-26 12:49:12 +02:00

config

bbb: WIP—stabilize env/compose wiring & prep SFU override

2025-09-26 12:49:12 +02:00

files

Huge role refactoring/cleanup. Other commits will propably follow. Because some bugs will exist. Still important for longrun and also for auto docs/help/slideshow generation

2025-07-08 23:43:13 +02:00

filter_plugins

Implemented correct path replace not just for context: but also for build: paths

2025-08-11 18:46:02 +02:00

README.md

BigBlueButton

Description

This Ansible role deploys BigBlueButton using Docker Compose. It includes support for Greenlight, OIDC, LDAP, TURN/STUN, health checks, and a modular .env setup. This role is ideal for educational institutions and teams requiring a self-hosted video conferencing solution.

🔧 Note: The database layer should be decoupled in a future release to improve modularity and integration.

Overview

This role provides a fully automated deployment of BigBlueButton using Docker Compose on Arch Linux. It manages the entire lifecycle of the deployment, from cloning the upstream Docker repository and generating the .env configuration to customizing docker-compose.yml for volume usage, WebSocket proxying, and optional LDAP/OIDC integration.

The setup includes conditional Greenlight activation, WebRTC support via TURN/STUN, and various fixes for known container orchestration issues. The role is modular and integrates seamlessly with the Infinito.Nexus infrastructure, including reverse proxy configuration, domain management, and secrets templating.

By default, BigBlueButton is deployed with best-practice hardening, modular secrets, and support for multiple authentication methods and scalable storage backends.

Features

🐳 Docker-based deployment via official bigbluebutton/docker
✅ Greenlight (v3) frontend support
🔐 SSO with OIDC & LDAP (optional)
🧱 Automatic .env templating and domain/Nginx integration
🛠 Volume patching and Docker Compose customization
📬 SMTP integration and Greenlight admin creation
🧪 Workarounds for known Docker Compose or Etherpad issues

Single Sign-On (SSO)

Docs: External Authentication
Supports:
- ✅ OpenID Connect (OIDC)
- ✅ LDAP (with custom DN and filters)
- 🧩 Custom OAuth2 flows via ENV vars

System Requirements

Arch Linux with Docker, Compose, and Nginx roles pre-installed
DNS and reverse proxy configuration using sys-svc-proxy
Functional email system for Greenlight SMTP