Install instructions in markdown format.
This commit is contained in:
Matthew Duggan
parent
9929d9520e
commit
26170676e1
|
|
@ -0,0 +1,198 @@
|
||||||
|
# Server Installation for jitmeet
|
||||||
|
|
||||||
|
## Install prosody and otalk modules
|
||||||
|
```sh
|
||||||
|
echo deb http://packages.prosody.im/debian $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list
|
||||||
|
wget --no-check-certificate https://prosody.im/files/prosody-debian-packages.key -O- | sudo apt-key add -
|
||||||
|
apt-get update
|
||||||
|
apt-get install prosody-trunk
|
||||||
|
apt-get install git lua-zlib lua-sec-prosody lua-dbi-sqlite3 liblua5.1-bitop-dev liblua5.1-bitop0
|
||||||
|
git clone https://github.com/andyet/otalk-server.git
|
||||||
|
cd otalk-server
|
||||||
|
cp -r mod* /usr/lib/prosody/modules
|
||||||
|
```
|
||||||
|
|
||||||
|
## Configure prosody
|
||||||
|
Modify the config file in `/etc/prosody/prosody.cfg.lua`:
|
||||||
|
- modules to enable/add: compression, bosh, smacks3, smacks2, carbons, mam, lastactivity, offline, pubsub, adhoc, websocket, http_altconnect
|
||||||
|
- comment out: `c2s_require_encryption = true`, and `s2s_secure_auth = false`
|
||||||
|
- change `authentication = "internal_hashed"`
|
||||||
|
- add this:
|
||||||
|
```
|
||||||
|
daemonize = true
|
||||||
|
cross_domain_bosh = true;
|
||||||
|
storage = {archive2 = "sql2"}
|
||||||
|
sql = { driver = "SQLite3", database = "prosody.sqlite" }
|
||||||
|
default_archive_policy = "roster"
|
||||||
|
```
|
||||||
|
- configure your domain by editing the example.com virtual host section section:
|
||||||
|
```
|
||||||
|
VirtualHost "jitmeet.example.com"
|
||||||
|
authentication = "anonymous"
|
||||||
|
ssl = {
|
||||||
|
key = "/var/lib/prosody/jitmeet.example.com.key";
|
||||||
|
certificate = "/var/lib/prosody/jitmeet.example.com.crt";
|
||||||
|
}
|
||||||
|
```
|
||||||
|
- and finally configure components:
|
||||||
|
```
|
||||||
|
Component "conference.jitmeet.example.com" "muc"
|
||||||
|
Component "jitsi-videobridge.jitmeet.example.com"
|
||||||
|
component_secret = "YOURSECRET1"
|
||||||
|
```
|
||||||
|
- check the example config file, next to the document (prosody.cfg.lua)
|
||||||
|
|
||||||
|
Generate certs for the domain:
|
||||||
|
```sh
|
||||||
|
prosodyctl cert generate jitmeet.example.com
|
||||||
|
```
|
||||||
|
|
||||||
|
## Install nginx
|
||||||
|
```sh
|
||||||
|
apt-get install nginx
|
||||||
|
```
|
||||||
|
|
||||||
|
Add nginx config for domain in `/etc/nginx/nginx.conf`:
|
||||||
|
```
|
||||||
|
tcp_nopush on;
|
||||||
|
types_hash_max_size 2048;
|
||||||
|
server_names_hash_bucket_size 64;
|
||||||
|
```
|
||||||
|
|
||||||
|
Add a new file in /etc/nginx/sites-available (see the jitmeet.example.com file for example)
|
||||||
|
```
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name jitmeet.example.com;
|
||||||
|
# set the root
|
||||||
|
root /srv/jitmeet.example.com;
|
||||||
|
index index.html;
|
||||||
|
location ~ ^/([a-zA-Z0-9]+)$ {
|
||||||
|
rewrite ^/(.*)$ / break;
|
||||||
|
}
|
||||||
|
# BOSH
|
||||||
|
location /http-bind {
|
||||||
|
proxy_pass http://localhost:5280/http-bind;
|
||||||
|
proxy_set_header X-Forwarded-For $remote_addr;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
}
|
||||||
|
# xmpp websockets
|
||||||
|
location /xmpp-websocket {
|
||||||
|
proxy_pass http://localhost:5280;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
|
proxy_set_header Connection "upgrade";
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
tcp_nodelay on;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
Add link for the added configuration
|
||||||
|
```sh
|
||||||
|
cd /etc/nginx/sites-enabled
|
||||||
|
ln -s ../sites-available/jitmeet.example.com jitmeet.example.com
|
||||||
|
```
|
||||||
|
check the example config files, next to the document (nginx.conf and jitmeet.example.com)
|
||||||
|
|
||||||
|
## Fix firewall if needed
|
||||||
|
```sh
|
||||||
|
ufw allow 80
|
||||||
|
ufw allow 5222
|
||||||
|
```
|
||||||
|
|
||||||
|
## Install videobridge
|
||||||
|
```sh
|
||||||
|
wget https://download.jitsi.org/jitsi-videobridge/linux/jitsi-videobridge-linux-{arch-buildnum}.zip
|
||||||
|
unzip jitsi-videobridge-linux-{arch-buildnum}.zip
|
||||||
|
```
|
||||||
|
|
||||||
|
Install JRE if missing:
|
||||||
|
```
|
||||||
|
apt-get install default-jre
|
||||||
|
```
|
||||||
|
|
||||||
|
In the user home that will be starting the jitsi video bridge create `.sip-communicator` folder and add the file `sip-communicator.properties` with one line in it:
|
||||||
|
```
|
||||||
|
org.jitsi.impl.neomedia.transform.srtp.SRTPCryptoContext.checkReplay=false
|
||||||
|
```
|
||||||
|
|
||||||
|
Start the videobrdige with:
|
||||||
|
```sh
|
||||||
|
./jvb.sh --host=localhost --domain=jitmeet.example.com --port=5347 --secret=YOURSECRET1 &
|
||||||
|
```
|
||||||
|
Or autostart it by adding the line in `/etc/rc.local`:
|
||||||
|
```sh
|
||||||
|
/bin/bash /root/jitsi-videobridge-linux-x64-74/jvb.sh --host=localhost --domain=jitmeet.example.com --port=5347 --secret=YOURSECRET1 </dev/null >> /var/log/jvb.log 2>&1
|
||||||
|
```
|
||||||
|
|
||||||
|
Checkout and configure jitmeet:
|
||||||
|
```sh
|
||||||
|
cd /srv
|
||||||
|
git clone https://github.com/jitsi/jitmeet.git
|
||||||
|
mv jitmeet/ jitmeet.example.com
|
||||||
|
```
|
||||||
|
|
||||||
|
Edit `/srv/jitmeet.example.com/config.js`:
|
||||||
|
```
|
||||||
|
var config = {
|
||||||
|
hosts: {
|
||||||
|
domain: 'jitmeet.example.com',
|
||||||
|
muc: 'conference.jitmeet.example.com',
|
||||||
|
bridge: 'jitsi-videobridge.jitmeet.example.com'
|
||||||
|
},
|
||||||
|
useNicks: false,
|
||||||
|
bosh: '//jitmeet.example.com/http-bind' // FIXME: use xep-0156 for that
|
||||||
|
};
|
||||||
|
```
|
||||||
|
check the example config file, next to the document (config.js)
|
||||||
|
|
||||||
|
|
||||||
|
## Install [Turn server](https://github.com/andyet/otalk-server/tree/master/restund)
|
||||||
|
```sh
|
||||||
|
apt-get install make gcc
|
||||||
|
wget http://creytiv.com/pub/re-0.4.7.tar.gz
|
||||||
|
tar zxvf re-0.4.7.tar.gz
|
||||||
|
ln -s re-0.4.7 re
|
||||||
|
cd re-0.4.7
|
||||||
|
make install PREFIX=/usr
|
||||||
|
cd ..
|
||||||
|
wget http://creytiv.com/pub/restund-0.4.2.tar.gz
|
||||||
|
wget https://raw.github.com/andyet/otalk-server/master/restund/restund-auth.patch
|
||||||
|
tar zxvf restund-0.4.2.tar.gz
|
||||||
|
cd restund-0.4.2/
|
||||||
|
patch -p1 < ../restund-auth.patch
|
||||||
|
make install PREFIX=/usr
|
||||||
|
cp debian/restund.init /etc/init.d/restund
|
||||||
|
chmod +x /etc/init.d/restund
|
||||||
|
cd /etc
|
||||||
|
wget https://raw.github.com/andyet/otalk-server/master/restund/restund.conf
|
||||||
|
```
|
||||||
|
|
||||||
|
Configure addresses and ports as desired, and the password to be configured in prosody:
|
||||||
|
```
|
||||||
|
realm jitmeet.example.com
|
||||||
|
# share this with your prosody server
|
||||||
|
auth_shared YOURSECRET2
|
||||||
|
|
||||||
|
# modules
|
||||||
|
module_path /usr/lib/restund/modules
|
||||||
|
turn_relay_addr [turn ip address]
|
||||||
|
```
|
||||||
|
|
||||||
|
Configure prosody to use it in `/etc/prosody/prosody.cfg.lua`. Add to your virtual host:
|
||||||
|
```
|
||||||
|
turncredentials_secret = "YOURSECRET2";
|
||||||
|
turncredentials = {
|
||||||
|
{ type = "turn", host = "turn.address.ip.configured", port = 80, transport = "tcp" }
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
Reload prosody if needed
|
||||||
|
```
|
||||||
|
prosodyctl reload
|
||||||
|
telnet localhost 5582
|
||||||
|
module:reload("turncredentials", "jitmeet.example.com")
|
||||||
|
quit
|
||||||
|
```
|
||||||
|
|
||||||
Loading…
Reference in New Issue