jitsi-contrib/jitsi-helm v3.0.0

on GitHub

What's Changed

• feat: harden all Jitsi components by default
• feat: harden coturn and the metrics sidecars
• feat: upgrade Jitsi images to stable-11146-1
• feat: pull Jitsi images from ghcr.io
• feat: remove colibri websocket support
• fix(web): use unprivileged container port and drop in-container TLS
• fix(coturn): listen on unprivileged ports behind the service
• fix(prosody): chown data volume so prosodyctl can generate certs
• fix(jibri): run with a read-only root filesystem
• Modify security settings and environment variables
• docs: restructure the documentation into guides
• docs: add security hardening and upgrading guides

⚠️ BREAKING CHANGES ⚠️

• Jitsi images now come from ghcr.io/jitsi/*. Refresh any digest pins.
• All components run as UID 1000 with a read-only root filesystem.
• Prosody's data path moved to /var/lib/prosody; prosody.dataDir was removed.
• Jibri recordings moved to /storage/recordings.
• The web container listens on 8000, and web.httpsEnabled was removed. Terminate TLS at your ingress or gateway.
• coTURN listens on 3478/5349 internally; coturn.service.ports.* now set only the Service port.
• websockets.colibri was removed.

Full Changelog: v2.22.2...v3.0.0