Jail: meet

one time
.

create jail
export JAIL=meet
export JAILHOSTNAME=meet
export JAILDOMAIN=ahlawat.com
export JAILIP=67
export JAILUSER=X
export JAILUSERID=1000
export JAILUSERVNC=false

/root/FreeBSD/jails/create.sh $JAIL $JAILHOSTNAME $JAILDOMAIN $JAILIP $JAILUSER $JAILUSERID $JAILUSERVNC

iocage fstab -l $JAIL

iocage exec $JAIL "pkg install -y prosody jitsi-meet jitsi-videobridge jicofo nginx"

iocage exec $JAIL "sysrc prosody_enable=YES"
iocage exec $JAIL "sysrc jitsi_videobridge_enable=YES"
iocage exec $JAIL "sysrc jicofo_enable=YES"
iocage exec $JAIL "sysrc nginx_enable=YES"

iocage exec $JAIL "cp -f /mnt/config/prosody.cfg.lua /usr/local/etc/prosody/"
iocage exec $JAIL "cp -f /mnt/config/videobridge/jitsi-videobridge.conf /usr/local/etc/jitsi/videobridge/"
iocage exec $JAIL "cp -f /mnt/config/videobridge/sip-communicator.properties /usr/local/etc/jitsi/videobridge/"
iocage exec $JAIL "cp -f /mnt/config/jicofo.conf /usr/local/etc/jitsi/jicofo"
iocage exec $JAIL "cp -f /mnt/config/jitsi-meet/config.js /usr/local/www/jitsi-meet/"
iocage exec $JAIL "cp -f /mnt/config/jitsi-meet/interface_config.js /usr/local/www/jitsi-meet/"
iocage exec $JAIL "cp -f /mnt/config/nginx.conf /usr/local/etc/nginx/"
iocage exec $JAIL "cat /mnt/config/hosts.txt >> /etc/hosts"

iocage exec $JAIL "prosodyctl cert generate auth.meet.ahlawat.com"
iocage exec $JAIL "prosodyctl register focus auth.meet.ahlawat.com YOURSECRET3-qwertyuiop"
iocage exec $JAIL "keytool -noprompt -keystore /usr/local/etc/jitsi/jicofo/truststore.jks -importcert -alias prosody -file /var/db/prosody/auth.meet.ahlawat.com.crt"

iocage exec $JAIL "service prosody start"
iocage exec $JAIL "service jitsi-videobridge start"
iocage exec $JAIL "service jicofo start"
iocage exec $JAIL "service nginx start"


Notes:
Open ports on pfSense
${fwcmd} add pass tcp from any to me 4443 setup
${fwcmd} add pass udp from any to me 10000 setup

Open ports on pfSense to TURN on proxy jail
${fwcmd} add pass tcp from any to me 3478 setup         # TURN
${fwcmd} add pass udp from any to me 3478 keep-state    # TURN
${fwcmd} add pass tcp from any to me 5349 setup         # TURN TLS
${fwcmd} add pass udp from any to me 5349 keep-state    # TURN TLS


Showcased here is a capital and operational cost effective approach, using minimal server and networking hardware with multiple virtualized applications for Home and Business. This solution template can be easily scaled out and adapted for larger Enterprise deployments.
drop by the diyIT Matrix public room at #diyit:matrix.ahlawat.com
if you have any IT questions/feedback or to request pro bono consulting for a nonprofit

message me privately at @sharad:matrix.ahlawat.com
or email me at - sharad@ahlawat.com - pgpkey: 68DD6B89
Networking and Security Technologist.
EngineerĀ andĀ an avid Programmer.

https://sharad.ahlawat.com
strive to learn and pass on the knowledge to the next generation
one day humanity will understand the meaning of life and hopefully it will be more than ASCII 42 = "*" regex for whatever you want it to be,
and destiny is more than just a roll of a pair of dice with 42 dots (Lets nail down Quantum Entanglement)

May you Live Long (Intelligently) and Prosper and work on technology that matters.
© 2024 Sharad Ahlawat

No personal identifying data is collected or any form of analytics/metrics reported to a third-party by this website.