Claude
7c3f101fe0
asterisk.sh (homelab): - Easy Asterisk PBX with self-hosted coturn TURN server - Vendored from outis1one/easy-asterisk v0.10.0 for offline install - LAN-only or FQDN mode (TLS + TURN relay for remote access) - Auto-answer SIP headers for intercom use case - Authelia SSO for web admin; WEB_ADMIN_AUTH_DISABLED=true when chosen - UFW rules: 5060-5061, 8080, 8088-8089, 3478, 10000-20000/udp, 49152-49252/udp - Builds custom Docker image from vendor/easy-asterisk/ nextcloud.sh (utilities): - Custom Dockerfile: nextcloud:apache + smbclient (SMB external storage) - MariaDB 10.11 sidecar with matching env vars - OVERWRITEPROTOCOL/OVERWRITECLIURL/TRUSTED_PROXIES set for Caddy - Enables files_external app after first-run init (waits up to 90s) onlyoffice.sh (utilities): - JWT generated once, preserved across re-runs - _ensure_yq: auto-installs yq v4 for FileBrowser config patching - _wire_nextcloud: idempotent occ wiring (DocumentServerUrl, jwt_secret) - _wire_filebrowser: patches config.yaml + restarts container - Caddy block overrides X-Frame-Options to allow iframe embedding mattermost.sh (utilities): - PostgreSQL 15-alpine + Mattermost Team Edition + coturn (port 3479) - 8443/udp for Calls plugin RTC server - coturn uses --use-auth-secret HMAC mode (required by Calls plugin) - SITE_URL computed from SITE_DOMAIN, promptable - UFW: 8443/udp, 3479, 49153-49352/udp vendor/easy-asterisk/: - All upstream source files vendored for offline/self-contained installs - Dockerfile, docker/entrypoint.sh, docker/coturn-entrypoint.sh - easy-asterisk-v0.10.0.sh (6929-line management script) - scripts/vpn-diagnostics.sh, scripts/dns-whitelist.sh - .env.example https://claude.ai/code/session_014CCYqVwW6d6f5dw1qRokYt
61 lines
1.7 KiB
Docker
61 lines
1.7 KiB
Docker
FROM ubuntu:24.04
|
|
|
|
ENV LANG=en_US.UTF-8 \
|
|
LANGUAGE=en_US:en \
|
|
LC_ALL=en_US.UTF-8 \
|
|
DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
asterisk \
|
|
asterisk-core-sounds-en \
|
|
asterisk-core-sounds-en-wav \
|
|
asterisk-moh-opsound-wav \
|
|
tcpdump \
|
|
sngrep \
|
|
curl \
|
|
dnsutils \
|
|
iproute2 \
|
|
net-tools \
|
|
openssl \
|
|
python3 \
|
|
python3-pip \
|
|
python3-bcrypt \
|
|
locales \
|
|
&& locale-gen en_US.UTF-8 \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# NOTE: Opus transcoding (codec_opus.so) is NOT available on Ubuntu 24.04
|
|
# due to a packaging bug. Opus pass-through still works via res_format_attr_opus.so.
|
|
|
|
RUN mkdir -p /etc/asterisk/certs \
|
|
/var/lib/asterisk/static-http \
|
|
/var/log/asterisk \
|
|
/var/spool/asterisk \
|
|
/var/run/asterisk \
|
|
&& chown -R asterisk:asterisk \
|
|
/etc/asterisk \
|
|
/var/lib/asterisk \
|
|
/var/log/asterisk \
|
|
/var/spool/asterisk \
|
|
/var/run/asterisk
|
|
|
|
# Management script and helpers
|
|
COPY easy-asterisk-v0.10.0.sh /usr/local/bin/easy-asterisk
|
|
COPY scripts/vpn-diagnostics.sh /usr/local/bin/vpn-diagnostics
|
|
COPY scripts/dns-whitelist.sh /usr/local/bin/dns-whitelist
|
|
COPY docker/entrypoint.sh /entrypoint.sh
|
|
RUN chmod +x /usr/local/bin/easy-asterisk \
|
|
/usr/local/bin/vpn-diagnostics \
|
|
/usr/local/bin/dns-whitelist \
|
|
/entrypoint.sh
|
|
|
|
EXPOSE 5060/udp 5060/tcp 5061/tcp
|
|
EXPOSE 8080/tcp 8088/tcp 8089/tcp
|
|
EXPOSE 3478/udp
|
|
EXPOSE 10000-10100/udp
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
|
|
CMD asterisk -rx "core show version" || exit 1
|
|
|
|
ENTRYPOINT ["/entrypoint.sh"]
|