Comment: #news_866

Hi Jacob thanks for the nice video and step by step guide and so sorry for this long post.
I hope you know jitsi better than me and explain a little how it works.

I am  at home behind a  technicolor 789vac2 router (ip .1) redirecting some ports to my qnap nas(ip .20), some other ports to my mailserver(ip .22) (precisely kolab, so ports 80, 8080, 443, 25, 110, 143 and many others are busy). domain defined with aruba and static external ip arranged with all the necessary MX records as well to sun the whole aforesaid.

I am trying to rig up a jitsi VM (ip .47) (debian 10 + apache2.4 as i don't know nginx) on the qnap but I cannot expose port 443 as it is already used by the mail server so I have prepared a suitable reverse proxy on the mailserver apache2.4. Now the machine is perfectly reachable. I prepared a proxy for port 80 redirecting on port 443 the same as the native port 192.168.1.47:80 would have done on 192.168.1.47:443.

I can create meetings, secure the server as  you indicated and provided each end every feature you have described, but still I cannot join from any other machine (internal or extenral from my LAN equivalently).
I have also succeded in securing the server expanding my mail server certificates including jitsi.mydomain.com into my original www and mail.mydomain.com certificate from Letsencrypt. All seems fine with the basics. Rocket science is still mocking a little instead.

Now my questions:

1. shall I have a proxy also for port 5280? Bosh. Shall I prepare a redirect for http-bind? I'm going for some trial and error process but the combinations are almost infinite.
2. what is port 4443 for? Is it a mistake and is shall simply be 443?
3. port 1000/udp goes directly out through 192.168.1.1 as that port is not use by anything ele, and I did the same for port 1000 and 5280 but without success.
4. do you have any idea how to cope with this mixed proxy configuration? Do you have one at hand to show? What about other thousand of setting in all configuration files?
5. looking at the manual install network description on jitsi manual, there are other ports entering the area, namely 5347 from video bridge to xmpp and back and 5222. Do you think that the simple tag localhost (or 192.168.1.47) into the respective setting entries all along the config files will do just fine or will those ports be bounced between jitsi and mail server? SO shall I make meil aware of those ports?

tanks a lot at least to read all this!
by Alex

Amazingly clear and informative instructional! This combined with your text wiki page (for cut and paste of commands) made the whole process very easy for my first droplet installation. Thanks!

Can I create more than one user in Prosody?

Hey Jacob / All, I'm looking to find someone that can help me setup a Jitsi server and perhaps some custom development. Any interest or able to recommend anyone who may be? TIA.

jasonlr0407 said

Hey Jacob / All, I'm looking to find someone that can help me setup a Jitsi server and perhaps some custom development. Any interest or able to recommend anyone who may be? TIA.

Hi Jason, thanks for watching! I'm not accepting clientele work at this time, nor do I know anyone who is.

Iam facing issues with Jitsi meet token could you please help iam using AWS EC2 INSTANCE UBUNTU 20.04 lts

great video, thanks! I just set up on linode.   tried vultr but their cloud configs would continually rename my server with wrong host / fqdn.  Im just getting back into linux stuff, so was easier just to start with easier to use cloud host… more closely aligned with this awesome video!

I've used theses instruction and got just the result, that you described.

But times have changed:

The jicofo authorisation is moved from sip-communicator.properties (you cannot find this file) to jicofo.conf.
You have to enter

jicofo {
 authentication: {
    enabled: true
    type: JWT
    login-url: "your jitsi.url"
 }

Additonally one must use nginx and one cannot use apache2.

I just try to configure the of two webservers in parallel.

Eberhard

vaxinf said

I've used theses instruction and got just the result, that you described.

But times have changed:

The jicofo authorisation is moved from sip-communicator.properties (you cannot find this file) to jicofo.conf.
You have to enter

jicofo {
 authentication: {
    enabled: true
    type: JWT
    login-url: "your jitsi.url"
 }

Additonally one must use nginx and one cannot use apache2.

I just try to configure the of two webservers in parallel.

Eberhard

Hey, thanks for posting the tips! I'd definitely like to make an updated video for this eventually.

jacobgkau said

Hey, thanks for posting the tips! I'd definitely like to make an updated video for this eventually.

I've changed the config described here:

https://jitsi.github.io/handbook/docs/devops-guide/secure-domain/

Now it's working as before.

What's still annoying that I have to modify the the framerate from 5 FPS to 30 FPS to see
the video-output of the guests.