From 6ca5c7b396554baeae3d9637946dfde5f6dc9220 Mon Sep 17 00:00:00 2001
From: "azykov@mail.ru" <azykov@mail.ru>
Date: Wed, 4 Nov 2026 12:59:48 +0300
Subject: [PATCH] jitsi server

---
 clusters/base/apps/jitsi/helmrelease.yaml    | 58 ++++++++++++++++++++
 clusters/base/apps/jitsi/helmrepository.yaml |  8 +++
 clusters/base/apps/jitsi/kustomization.yaml  |  5 ++
 clusters/base/namespaces/video.yaml          |  4 ++
 clusters/home/apps/jitsi.yaml                | 17 ++++++
 clusters/home/apps/kustomization.yaml        |  3 +-
 clusters/home/namespaces/kustomization.yaml  |  3 +-
 7 files changed, 96 insertions(+), 2 deletions(-)
 create mode 100644 clusters/base/apps/jitsi/helmrelease.yaml
 create mode 100644 clusters/base/apps/jitsi/helmrepository.yaml
 create mode 100644 clusters/base/apps/jitsi/kustomization.yaml
 create mode 100644 clusters/base/namespaces/video.yaml
 create mode 100644 clusters/home/apps/jitsi.yaml

diff --git a/clusters/base/apps/jitsi/helmrelease.yaml b/clusters/base/apps/jitsi/helmrelease.yaml
new file mode 100644
index 0000000..3f7301c
--- /dev/null
+++ b/clusters/base/apps/jitsi/helmrelease.yaml
@@ -0,0 +1,58 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: jitsi
+  namespace: video
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: jitsi-meet
+      version: ">=1.0.0 <2.0.0"
+      sourceRef:
+        kind: HelmRepository
+        name: jitsi
+  install:
+    remediation:
+      retries: -1
+  upgrade:
+    remediation:
+      retries: 5
+  driftDetection:
+    mode: enabled
+  values:
+    publicURL: https://v.aggtaa.com
+
+    web:
+      ingress:
+        enabled: true
+        ingressClassName: traefik
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-prod
+        hosts:
+          - host: v.aggtaa.com
+            paths: ["/"]
+        tls:
+          - secretName: jitsi-tls
+            hosts:
+              - v.aggtaa.com
+
+    # media traffic: UDP 10000 must be forwarded from the WAN router to the dmz pool ip (10.0.64.7)
+    jvb:
+      UDPPort: 10000
+      service:
+        enabled: true
+        type: LoadBalancer
+        externalTrafficPolicy: Cluster
+
+  postRenderers:
+    - kustomize:
+        patches:
+          # pin the JVB service to the dmz pool (see infra/metallb/config.yaml)
+          - target:
+              kind: Service
+              name: jitsi-jitsi-meet-jvb
+            patch: |
+              - op: add
+                path: /metadata/labels/loadBalancerPool
+                value: dmz
diff --git a/clusters/base/apps/jitsi/helmrepository.yaml b/clusters/base/apps/jitsi/helmrepository.yaml
new file mode 100644
index 0000000..64b3faf
--- /dev/null
+++ b/clusters/base/apps/jitsi/helmrepository.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: jitsi
+  namespace: video
+spec:
+  interval: 1h
+  url: https://jitsi-contrib.github.io/jitsi-helm/
diff --git a/clusters/base/apps/jitsi/kustomization.yaml b/clusters/base/apps/jitsi/kustomization.yaml
new file mode 100644
index 0000000..d7fbb03
--- /dev/null
+++ b/clusters/base/apps/jitsi/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrepository.yaml
+  - helmrelease.yaml
diff --git a/clusters/base/namespaces/video.yaml b/clusters/base/namespaces/video.yaml
new file mode 100644
index 0000000..872a8a5
--- /dev/null
+++ b/clusters/base/namespaces/video.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: video
diff --git a/clusters/home/apps/jitsi.yaml b/clusters/home/apps/jitsi.yaml
new file mode 100644
index 0000000..1179ff5
--- /dev/null
+++ b/clusters/home/apps/jitsi.yaml
@@ -0,0 +1,17 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: jitsi
+  namespace: flux-system
+spec:
+  interval: 10m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./clusters/base/apps/jitsi
+  prune: true
+  wait: true
+  dependsOn:
+    - name: namespaces
+    - name: infra
+  retryInterval: 5s
diff --git a/clusters/home/apps/kustomization.yaml b/clusters/home/apps/kustomization.yaml
index 9f9bc24..fd2a7bc 100644
--- a/clusters/home/apps/kustomization.yaml
+++ b/clusters/home/apps/kustomization.yaml
@@ -21,4 +21,5 @@ resources:
   - tinyauth.yaml
   - it-tools.yaml
   - ntfy.yaml
-  - map-monitor.yaml
\ No newline at end of file
+  - map-monitor.yaml
+  - jitsi.yaml
\ No newline at end of file
diff --git a/clusters/home/namespaces/kustomization.yaml b/clusters/home/namespaces/kustomization.yaml
index 5b2ce5b..948e1f8 100644
--- a/clusters/home/namespaces/kustomization.yaml
+++ b/clusters/home/namespaces/kustomization.yaml
@@ -21,4 +21,5 @@ resources:
   - ../../base/namespaces/ci.yaml
   - ../../base/namespaces/tools.yaml
   - ../../base/namespaces/notify.yaml
-  - ../../base/namespaces/iot.yaml
\ No newline at end of file
+  - ../../base/namespaces/iot.yaml
+  - ../../base/namespaces/video.yaml
\ No newline at end of file