apt update && apt upgrade -y
If the machine used to host the Jitsi Meet instance has a FQDN (for example meet.example.org) already set up in DNS, you can set it with the following command:
sudo hostnamectl set-hostname meet.example.org
Then add the same FQDN in the /etc/hosts file:
127.0.0.1 localhost
x.x.x.x meet.example.org
Note: x.x.x.x is your server's public IP address.
Finally on the same machine test that you can ping the FQDN with:
ping "$(hostname)"
If all worked as expected, you should see: meet.example.org
curl https://download.jitsi.org/jitsi-key.gpg.key | sudo sh -c 'gpg --dearmor > /usr/share/keyrings/jitsi-keyring.gpg'
echo 'deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg] https://download.jitsi.org stable/' | sudo tee /etc/apt/sources.list.d/jitsi-stable.list > /dev/null
sudo apt update
sudo ufw allow 80/tcp
sudo ufw allow 443/tcp
sudo ufw allow 10000/udp
sudo ufw allow 22/tcp
sudo ufw allow 3478/udp
sudo ufw allow 5349/tcp
sudo ufw enable
Check the firewall status with
sudo ufw status verbose
NOTE: IF YOU HAVE PLAN TO INSTALL YOUR OWN SSL (PAID) CERTIFICATE, FIRST CONFIGURE THE SSL CERTIFICATE UPLOAD THE .crt and .key FILES ON THIS SERVER AND REMEMBER THE FILE PATH BEFORE MOVE TO NEXT STEP
sudo apt install jitsi-meet
During the installation, you will be asked to enter the FQDN of the Jitsi Meet instance. Please be sure to enter the correct hostname (in our case meet.example.org)
In order to have secure communication we need a TLS certificate. Luckily Jitsi Meet makes this very easy. Simply run the following command, enter a valid email address and wait until the script finished.
/usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh
Launch a web browser (such as Firefox, Chrome or Safari) and enter the hostname or IP address from the previous step into the address bar.
You should see a web page prompting you to create a new meeting. Make sure that you can successfully create a meeting and that other participants are able to join the session.
Following confguration on Jitsi server (Main Server)
We need to run prosody on all interfaces. To do that, add the following line at the beginning of /etc/prosody/prosody.cfg.lua file
component_ports = { 5347 }
component_interface = "0.0.0.0"
add the following lines to /etc/jitsi/videobridge/sip-communicator.properties
org.jitsi.videobridge.DISABLE_TCP_HARVESTER=true
org.jitsi.videobridge.xmpp.user.shard.DISABLE_CERTIFICATE_VERIFICATION=true
Open inbound traffic from JVB server on port 5222 (TCP) of Prosody server.
Connect to the second machine, add the required repositories and install jitsi-videobridge by running the following commands.
curl https://download.jitsi.org/jitsi-key.gpg.key | sudo sh -c 'gpg --dearmor > /usr/share/keyrings/jitsi-keyring.gpg'
echo 'deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg] https://download.jitsi.org stable/' | sudo tee /etc/apt/sources.list.d/jitsi-stable.list > /dev/null
sudo apt update
sudo apt install jitsi-videobridge2 -y
open the file /etc/jitsi/videobridge/sip-communicator.properties and add the following lines to the end.
org.jitsi.videobridge.DISABLE_TCP_HARVESTER=true
org.jitsi.videobridge.xmpp.user.shard.DISABLE_CERTIFICATE_VERIFICATION=true
In the same file find the line org.jitsi.videobridge.xmpp.user.shard.HOSTNAME and set it to the public ip address of the prosody server(main server).
org.jitsi.videobridge.xmpp.user.shard.HOSTNAME=<public ip address>
soon
curl -sL https://deb.nodesource.com/setup_14.x | sudo -E bash -
sudo apt install -y nodejs
git clone --branch master https://github.com/ether/etherpad-lite.git &&
cd etherpad-lite &&
src/bin/run.sh
It will run on the port by default tcp/9001(no need to open the firewall, it will communicate locally with nginx in reverse proxy)
systemctl enable etherpad-lite
systemctl start etherpad-lite
systemctl status etherpad-lite
if there is any error run:-
systemctl stop etherpad-lite
systemctl start etherpad-lite
# Etherpad-lite
location ^~ /etherpad/ {
proxy_pass http://localhost:9001/;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_buffering off;
proxy_set_header Host $host;
}
Restart nginx
sudo service nginx restart
etherpad_base: 'https://meet.example.org/etherpad/p/',
That's all. Now start meeting and click on "Open shared document"
soon