sudo su
open file /etc/jitsi/videobridge/sip-communicator.properties
and add these line:
org.jitsi.videobridge.STATISTICS_TRANSPORT=colibri
org.jitsi.videobridge.rest.jetty.port=9090
org.jitsi.videobridge.rest.COLIBRI_WS_TLS=true
org.jitsi.videobridge.rest.COLIBRI_WS_DOMAIN=<your.jvb.domain>:443
org.jitsi.videobridge.rest.COLIBRI_WS_SERVER_ID=<jvb-id>
The jetty port can be different, but don't use 8080. Because it is already used by jvb statistics api.
apt-get update
apt-get install nginx
create file for handling webscoket
nano /etc/nginx/site-available/videobridge
copy & paste this config
server {
listen 443 ssl;
server_name <your jvb domain>;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA256:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EDH+aRSA+AESGCM:EDH+aRSA+SHA256:EDH+aRSA:EECDH:!aNULL:!eNULL:!MEDIUM:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!SEED";
add_header Strict-Transport-Security "max-age=31536000";
ssl_certificate /path/to/<your.jvb.domain>.crt;
ssl_certificate_key /path/to/<your.jvb.domain>.key;
location ~ ^/colibri-ws/<jvb-id>/(.*) {
proxy_pass http://127.0.0.1:9090/colibri-ws/<jvb-id>/$1$is_args$args;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
tcp_nodelay on;
}
}
don't forget to adjust the domain name, jvb id & SSL certificate.
ln -s /etc/nginx/site-available/videobridge /etc/nginx/site-enabled/
nginx -t
service nginx reload
systemctl restart jitsi-videobridge2
To ensure the websocket is on, check jvb log
grep 'wss:' /var/log/jitsi/jvb.log
you should see that your websocket url is live.
Check listen port on the server, make sure 443 and 9090 is listening:
netsat -ntplu
Lastly, check from browser that nothing is blocking the jvb websocket:
https://<your jvb domain>/colibri-ws/<jvb id>/
you will get error 405 from jetty, that is ok.
open client configuration at /etc/jitsi/meet/<domain>-config.js
and add/uncomment this line:
openBridgeChannel: 'websocket',