From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from srv1.stroeder.com (srv1.stroeder.com [213.240.180.113]) by mail.toke.dk (Postfix) with ESMTPS id 20AC37C3E18 for ; Sun, 3 Jan 2021 03:12:22 +0100 (CET) Authentication-Results: mail.toke.dk; dkim=pass (1536-bit key) header.d=stroeder.com header.i=@stroeder.com header.b=fmYMa+Mu DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=stroeder.com; s=stroeder-com-20201114; t=1609639939; bh=j7UHdgZZcfU2bkD7pgCgs+PNgAbjanvf2sUkcVHmqEE=; h=Subject:To:References:From:Date:In-Reply-To:From; b=fmYMa+Muv0xRHWlYRtQoxq93eF36Z7izT2qf0MmMWth+alS4ffo0ik0K5YccdlDfD VqSQpTFBpzt8x55nBg5mdr8YwujjO1vbuelcs2utrGDDeBIEsUkzTkfhOcciAwZwfu RqqzIkQdWkMaHNkEHBbLlORIXdJALSjgqCEzU0XA+zv854ni2+dqFBtjbmsn3OPg/t YQir0zERcaxBubnJTTNG0lhFr9AUTTKD85CqcQXSaltnNHZDVqM1MYP6FAW To: galene@lists.galene.org References: <23913aea-038e-96de-560e-371972a3c222@stroeder.com> <87eej2hm1p.wl-jch@irif.fr> From: =?UTF-8?Q?Michael_Str=c3=b6der?= Message-ID: Date: Sun, 3 Jan 2021 03:12:18 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.6.0 MIME-Version: 1.0 In-Reply-To: <87eej2hm1p.wl-jch@irif.fr> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Message-ID-Hash: 6F6OQYMRKORTUUZV375AG7X5WHGI3ZRY X-Message-ID-Hash: 6F6OQYMRKORTUUZV375AG7X5WHGI3ZRY X-MailFrom: michael@stroeder.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; suspicious-header X-Mailman-Version: 3.3.2 Precedence: list Subject: [Galene] Re: read groups from API List-Id: =?utf-8?q?Gal=C3=A8ne_videoconferencing_server_discussion_list?= Archived-At: List-Archive: List-Help: List-Post: List-Subscribe: List-Unsubscribe: On 1/3/21 2:00 AM, Juliusz Chroboczek wrote: >> It would be helpful if groups could be retrieved from a simple web >> service which just returns the JSON data. >=20 > Why does that need to be part of Gal=C3=A8ne ? Why can't it be a separ= ate > service that has access to the filesystem with Gal=C3=A8ne's configurat= ion > files? Of course syncing files would be possible and I will do that if there's no other possibility. But it's more complicated with some sync latency. > This way, Gal=C3=A8ne doesn't need write access to its configuration > directory, which is good for security and simplifies deployment (you ca= n > run it in a read-only container). Gal=C3=A8ne should not write to its config. But instead of reading a file from the filesystem it could just send a HTTP(S) request to an API (with simple HTTP basic authentication). >> This would make it possible to integrate with other database-backed >> management systems so that implementing #11 is not really needed. >=20 > I fully agree that the management interface should not be part of Gal=C3= =A8ne > itself: Gal=C3=A8ne never writes to disk except if you ask it to record= a file, Be assured I highly appreciate this approach. > and that two instances of Gal=C3=A8ne can use a single configuration > directory. I'd argue that using a web API is much simpler than a shared network file system. > - changes to group definition files will be picked up the next time > a client connects; Why not just query the group from an API? > - changes to the ice-servers.json file will be picked up after two > minutes at most, but will only apply to new clients; > - changes to the SSL key or to the data/passwd file are not picked up > yet, but that is planned in the future. Both not that important for me. Not sure how others feel about this. > So my opinion is that an administrative interface should not be hacked > into Gal=C3=A8ne +1, especially because it will never be complete (for whatever defintion of "complete" one might come up with). >> I'd volunteer to implement an example web service based on Python with >> fastapi module. >=20 > Sure, and don't hesitate to suggest improvements to the configuration f= ile > format. Yes, I have some ideas like validity period or similar. Will send a separate message soon. > In particular, I'm not particularly fond of the current > permissions system Agreed. ;-) Thanks again for Gal=C3=A8ne. Ciao, Michael.