cdist-type__jitsi_meet(7)¶

NAME¶

cdist-type__jitsi_meet - Setup the server-side of Jitsi-Meet.

DESCRIPTION¶

This (singleton) type installs and configures jitsi-meet automatically.

It does so by following loosely the official quick-install instructions and eXO’s notes for installing and managing Jitsi Meet instances.

This type also sets up nginx in a way that is compatible with __letsencrypt_cert and assumes that it will only serve Jitsi instances.

You will also need the __jitsi_meet_domain type in order to finish setting up the web frontend (including TLS certificates) and its settings.

You may want to use the files/ufw example manifest for a __ufw-based firewall compatible with this type. This file does not include rules for TCP port 9888, which exposes the prometheus exporter if not disabled. You should apply your own rules here.

This type only works on De{bi,vu}an systems.

NOTE: This type currently does not deal with setting up coturn.: For that, you might want to check __coturn in https://code.ungleich.ch/ungleich-public/cdist-contrib In that case, this type should run after __coturn.

OPTIONAL PARAMETERS¶

turn-secret: The shared secret for the TURN server.
turn-server: The hostname of the TURN server. This will assume that it is listening with TLS on port 443.
jitsi-version: The jitsi-meet version of the Debian package to be installed. While this can be specified, only the default value is known to work properly with this type.

BOOLEAN PARAMETERS¶

disable-prometheus-exporter: This type enables a prometheus exporter for jitsi by default, if you would rather not have that, pass this parameter. The explorer is based on: https://github.com/systemli/prometheus-jitsi-meet-exporter
secured-domains: If this flag is present, all domains that use this Jitsi instance will require that an authenticated user starts a meeting. For information on how this is achieved, see https://jitsi.github.io/handbook/docs/devops-guide/secure-domain . You will need to create the users with __jitsi_meet_user(7).

EXAMPLES¶

# Setup the firewall
. "${__global}/type/__jitsi_meet/files/ufw"
export require="__ufw"
# Setup Jitsi on this host
__jitsi_meet \
  --turn-server "turn.exo.cat" \
  --turn-secret "WeNeedGoodSecurity"

AUTHORS¶

Evilham <contact@evilham.com>