Host a Jitsi Meet Server

This tutorial will demonstrate how to install Jitsi Meet (and its required components) on a Debian 10 server. Watch the video version here.

Prerequisites: You will need a server running Debian 10 (visit digitalocean.nots.co or linode.nots.co if you don't have one.) You will also need a domain name (visit hover.nots.co if you don't have one.) Point the domain name to the IP address of your server (a subdomain will work fine.)

Example parameters: In this example, our fully-qualified domain name (FQDN) is "jitsi.example.com". All passwords will be set to "P@ssw0rd".


Step 1: Log into your server as root (or use sudo) and make sure your server is entirely up-to-date:

Code

apt update
apt full-upgrade

Step 2: Ensure that your hostname and FQDN are set (if not, set them by placing the hostname in /etc/hostname and the FQDN in /etc/hosts):

Code

cat /etc/hostname
dnsdomainname -f
cat /etc/hosts

Step 3: Install the prerequisite packages:

Code

apt install gnupg apt-transport-https

Step 4: Add the Jitsi repository to your package manager and refresh your package lists:

Code

echo 'deb https://download.jitsi.org stable/' >> /etc/apt/sources.list.d/jitsi-stable.list
wget -qO -  https://download.jitsi.org/jitsi-key.gpg.key | sudo apt-key add -
apt update

Step 5: Install the Jitsi Meet package:

Code

apt install jitsi-meet

Enter your FQDN when prompted, and select the option to generate a self-signed certificate during installation.

Step 6: Generate a publicly-usable SSL/TLS certificate using Let's Encrypt:

Code

/usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh

The server should now be publicly usable.

Step 7 (Optional): If your server is behind a router performing NAT, forward ports TCP/443 and UDP/10000 to the server's internal IP address. Open the videobridge configuration file:

Code

nano /etc/jitsi/videobridge/sip-communicator.properties

Add these two lines of configuration with the appropriate IP addresses:

Code

org.ice4j.ice.harvest.NAT_HARVESTER_LOCAL_ADDRESS=<Local.IP.Address>
org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS=<Public.IP.Address>

Step 8: To require authentication to create or join a room, open the Prosody configuration file:

Code

nano /etc/prosody/conf.avail/jitsi.example.com.cfg.lua

Change the "authentication" option from "anonymous" to "internal_plain":

Code

authentication = "internal_plain"

Step 9: Open the Jifoco configuration file:

Code

nano /etc/jitsi/jicofo/sip-communicator.properties

Add this option to the bottom of the file:

Code

org.jitsi.jicofo.auth.URL=XMPP:jitsi.example.com

Step 10: To create a user in Prosody, run this command:

Code

prosodyctl register yourusernamehere jitsi.example.com P@ssw0rd

Step 11: Restart the Prosody and Jitsi services to apply changes:

Code

systemctl restart prosody
systemctl restart jicofo
systemctl restart jitsi-videobridge2

Step 12: To not require authentication for joining a room while still requiring authentication for creating new rooms, open the Prosody configuration file:

Code

nano /etc/prosody/conf.avail/jitsi.example.com.cfg.lua

Add a new VirtualHost section to the bottom of the file:

Code

VirtualHost "guest.jitsi.example.com"
    authentication = "anonymous"
    c2s_require_encryption = false

Step 13: Open the Jitsi Meet configuration file:

Code

nano /etc/jitsi/meet/jitsi.example.com-config.js

Uncomment and set the "anonymousdomain" option:

Code

anonymousdomain: 'guest.jitsi.example.com',

Step 14: Restart the Prosody and Jitsi services to apply changes (again):

Code

systemctl restart prosody
systemctl restart jicofo
systemctl restart jitsi-videobridge2

There are no pages beneath this page

Expand: Discussion Discussion (0 posts)