From 3a0300cd07d05e835726a714b2c98d075e8de3de Mon Sep 17 00:00:00 2001 From: Slavi Pantaleev Date: Tue, 13 Oct 2026 00:49:44 +0300 Subject: [PATCH] Upgrade Jitsi (v11248-4 -> v11248-5) The role replaced `jitsi_web_framing_enabled` with `jitsi_web_framing_ancestors`. Embedding is still allowed from anywhere, now via `jitsi_web_framing_ancestors_default: ['*']`. Co-Authored-By: Claude Opus 5.5 (1M context) --- group_vars/matrix_servers | 5 +++-- requirements.yml | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/group_vars/matrix_servers b/group_vars/matrix_servers index 06c88c56d..e1dd929f6 100755 --- a/group_vars/matrix_servers +++ b/group_vars/matrix_servers @@ -4065,8 +4065,9 @@ jitsi_web_stun_servers: | else [ 'stun:meet-jit-si-turnrelay.jitsi.net:443'] }} -# The Jitsi instance installed by this playbook is meant for embedding into Matrix clients, so framing is allowed. -jitsi_web_framing_enabled: true +# The Jitsi instance installed by this playbook is meant for embedding into Matrix clients, so framing is allowed from anywhere. +# To restrict it, set this to `["'self'"]` and list any additional origins in `jitsi_web_framing_ancestors_custom`. +jitsi_web_framing_ancestors_default: ['*'] # Jitsi (Prosody) only seems to support authenticating with coturn using `auth-secret`, not `lt-cred-mech`. # See: https://prosody.im/doc/coturn diff --git a/requirements.yml b/requirements.yml index 505c6a2a2..e785bd953 100644 --- a/requirements.yml +++ b/requirements.yml @@ -42,7 +42,7 @@ version: v0.5.1-8 name: hydrogen - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-jitsi.git - version: v11248-4 + version: v11248-5 name: jitsi - src: git+https://github.com/mother-of-all-self-hosting/ansible-role-livekit-server.git version: v1.13.9-0