non-critical-infra: lasuite-meet init

[Eveeifyeve]

Adds lasuite-meet to non-critical-infra.

Fixes #401

I have discussed with @Mic92 in the nix meeting and it should be okay with calibean machine (if not we can always switch).
It should be able to run without an account, however I can't test due to secret signing and not currently having a nixos machine.

Note

The secrets will need to be done and signed by one of the people keys in sops.nix, before this pr is merged.

[Mic92]

Do you know about the format of these? If not i can look it up

[Eveeifyeve]

No I am not too sure. The documentation wasn't clear about it.

[Eveeifyeve]

@Mic92 I would like to get this pr a bit of a move-on, did you manage to check the format?

[Eveeifyeve]

Django stuff is is not needed as it's generated if you don't set it, I have figured out the livekit file to be a yml file.

[numinit]

FYI:

https://github.com/NixVegas/systems/blob/main/modules/lasuite-meet.nix

Instance at https://meet.nix.vegas:

/etc/lasuite-meet/lasuite-meet.env:

LIVEKIT_API_KEY=REDACTED
LIVEKIT_API_SECRET=REDACTED
OIDC_RP_CLIENT_SECRET=REDACTED
OIDC_USE_PKCE=true

/etc/lasuite-meet/livekit.yml:

LIVEKIT_API_KEY: LIVEKIT_API_SECRET

Use /nix/store/*/bin/livekit-server generate-keys to make keys. It outputs this (which is not actually our livekit key and secret):

API Key:  APIcN6xCJUVQAdm
API Secret:  RzQl5WxNRFFVjvaN2HEzPsPq5ZOpO44O5CLTf4mwZeX

[numinit]

You'll also want to turn off FRONTEND_IS_SILENT_LOGIN_ENABLED if you will be sharing meeting URLs that do not require login

[Eveeifyeve]

You'll also want to turn off FRONTEND_IS_SILENT_LOGIN_ENABLED if you will be sharing meeting URLs that do not require login

This is intended, unless we want to hook up github as an odic provider which I am not sure if you can, this can be dismissed.

I also added recording support which would be useful to the Steering committee for recording mins.

[numinit]

IIRC recording requires something else that I haven't figured out yet.