welcome: please sign in

The following 725 words could not be found in the dictionary of 7 words (including 7 LocalSpellingWords) and are highlighted below:
0d7a7304977b136941547713773d48e472ac91b2   720p   ab0a76f3973b53069ec884b7dcea67931c585a5f   about   above   Abstract   accept   access   according   account   actively   adapt   add   Add   addition   additional   addon   Advantage   advice   after   again   against   all   allow   allows   Also   also   Alternatively   Alternatives   always   an   anchor   and   android   Another   ansible   any   apache   app   apparently   appearing   appears   application   applied   appropriately   apps   are   aren   around   as   at   attempt   audio   Audio   auth   authenticate   authenticated   Authentication   authentication   avail   available   avatars   avoid   away   background   backports   bad   bandwidth   bare   base   be   before   better   Big   bigbluebutton   bit   blob   blog   Blue   blurb   both   box   branding   break   breakout   bridge   browser   built   buster   but   Button   by   call   calls   callstats   camera   can   Can   cause   cert   Certificate   certificate   cfg   changed   changes   Check   chromium   clear   Click   clicking   client   closed   Closed   club   Club   clues   color   Color   colour   com   combined   come   community   company   compatibility   complete   components   conf   conference   conferencing   config   Config   configure   confusing   connect   Connection   contacted   content   Contents   contribute   converted   coop   copy   could   cpu   created   css   currently   Custom   custom   customize   cyrus   cyrussasl   cyrussaslauthd   data   Data   debian   dedicated   deemed   Default   default   defaults   Defects   deployment   description   desktop   despite   dest   details   detection   dev   development   devops   didn   Digital   directives   disable   disabled   disabling   Discussing   discussion   Display   display   do   doc   docs   Does   does   doesn   domain   domtool   don   dot   download   downloading   Droid   dropbox   due   edges   edumeet   ejabberd   elements   en   Enable   enable   Enabled   enabled   endpoints   entering   error   Error   essential   etc   Etc   Etherpad   even   evernote   Every   example   Exception   exim   existing   exists   External   failed   false   faq   feasible   Fellow   fellow   few   fff   fields   file   files   fine   firefox   fix   Fixed   flagship   Followed   for   Forced   Frame   frame   from   frontend   fsf   function   Further   generate   Generated   generated   generating   get   git   github   githubusercontent   gitlab   going   google   got   group   guide   Guide   Hacker   hacker   had   handbook   Has   has   have   having   hb   hcoop   header   hex   hide   Hill   Host   host   hosting   Hosting   Hostname   hostname   how   howto   html   https   id   ideas   If   if   im   Image   image   images   img   important   improve   in   include   index   info   information   infrastructure   Insecure   insert   install   installed   instance   instead   Instead   integrate   integrates   integration   integrations   interface   internal   into   inventory   io   is   issues   it   It   its   jabber   Jack   java   Jicofo   jicofo   jit   Jiti   Jitsi   jitsi   jitsimeet   Jitster   jivesoftware   js   json   July   just   kerberos   key   keys   label   lang   large   Layer   layer   layers   ldap   least   leave   left   Levels   librejs   licensing   like   limit   line   lineinfile   link   list   Listener   ll   lobby   local   locally   log   logging   logo   logos   longer   look   Looks   lower   lua   Main   Make   make   making   mandatory   master   match   max   maximum   may   maybe   Maybe   Mbps   me   means   mech   meet   Meet   meeting   meetings   membership   method   mic   might   Might   migrate   min   minimum   Misc   missing   mobile   mode   Module   modules   more   multiplexing   must   muted   Muted   My   my   name   Name   need   Need   needed   needs   negated   net   never   Nginx   nginx   nice   nickname   no   None   none   Not   not   note   notes   Notes   Nth   null   number   occur   Ocean   Of   of   On   on   one   ones   only   Ons   Open   option   Optional   options   or   org   organizations   other   our   out   override   Override   own   owner   P8   P9   Packages   packaging   Packet   Packets   Page   parse   participant   participants   Party   party   password   patching   path   people   performance   Performance   person   personal   place   plain   play   Plogo   png   point   possible   Possible   postinst   practice   prejoin   Privacy   privacy   probably   proceed   promises   prosidy   prosody   provide   provided   puppet   Puppet   pwa   pwcheck   Questions   quickstart   quite   ram   rate   Rate   raw   react   Reader   reasonable   receive   Received   Recommends   recording   recordings   Recordings   reduce   reduced   reducing   regexp   release   Remove   replace   request   requested   requests   Requests   require   Require   resolution   resource   respecting   response   review   room   Room   rooms   root   rough   run   safe   sasl   saslauthd   savings   scale   schema   script   Script   secure   Security   security   seems   Self   self   sent   server   Servers   serving   set   setting   setup   Setup   several   shape   share   shared   sharing   Sharing   should   shows   si   side   simplicity   since   Since   sites   sizes   smack   snippets   so   some   something   soon   speaking   specific   specify   Specify   src   ssl   stable   stale   Staleness   Start   start   starts   stat   static   steps   store   straightforward   structure   stuff   stun   Subject   suggested   support   sure   suspended   Suspension   suspension   Table   target   tcp   test   Testing   testing   text   than   that   The   the   their   theory   There   there   these   they   thing   Things   things   think   third   Third   this   This   thread   Thread   to   true   tune   Tuning   tuning   turnrelay   turnserver   tweaks   type   under   unencrypted   unknownlamer   Unlike   unsafe   unsupported   until   up   Update   upstream   Url   url   urls   usage   use   used   Useful   useful   users   uses   Using   using   usr   usual   value   vcs   verification   vhost   via   video   Video   videobridge   Virtual   vp9   want   Warning   warning   was   wasm   watermark   We   we   web   websockets   what   when   which   whose   why   wiki   wildcard   will   windfluechter   With   with   without   work   worked   worker   Working   working   worth   would   xmpp   Xmx   yes   youtube  

Clear message
Edit

ClintonEbadi / JitsiMeet

Notes on setting up Jitsi Meet on a personal server. Main thing is to note what we'd need to do to get this set up on an hcoop server

Contents

  1. Setup Script
  2. Puppet Module Notes
    1. Check for Staleness
    2. Not sure if it's just me or not
    3. Defects
  3. Testing
    1. Things to look out for
  4. Security
  5. Open Questions
  6. FSF setup
    1. Useful snippets
    2. Custom index
  7. Config changes
    1. Performance
    2. /etc/jitsi/meet/meet.hcoop.net-config.js
    3. /usr/share/jitsi-meet/interface_config.js
    4. /usr/share/jitsi-meet/logging_config.js
    5. /etc/jitsi/videobridge/config
    6. /etc/jitsi/jicofo/config
  8. Add-Ons / Etc
  9. Possible Alternatives

1. Setup Script

https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart

Followed the script and got a working install.

Working config out of the box, if we accept having to run this on a dedicated server.

2. Puppet Module Notes

https://gitlab.com/shared-puppet-modules-group/jitsimeet

The puppet modules has a few rough edges that we should fix and contribute upstream.

2.1. Check for Staleness

2.2. Not sure if it's just me or not

2.3. Defects

3. Testing

Using https://meet.unknownlamer.org on my personal DigitalOcean account. With a 2CPU/2G RAM setup, a 4 person conference used around 4Mbps and 10% CPU.

3.1. Things to look out for

4. Security

https://jitsi.github.io/handbook/docs/devops-guide/secure-domain

Need to adapt to kerberos, will have to use SASL: https://prosody.im/doc/cyrus_sasl (we have saslauthd in place for exim, so should be straightforward)

There are some additional steps to auth against sasl:

lua-cyrussasl must be installed from buster-backports on Debian 10.

/etc/prosody/conf.avail/meet-test.hcoop.net.cfg.lua : 

...
VirtualHost "meet-test.hcoop.net"
    -- enabled = false -- Remove this line to enable this host
    authentication = "cyrus"
    cyrus_application_name = "xmpp"
    --allow_unencrypted_plain_auth = true -- is this safe ? / it worked fine without it
...
    modules_enabled = {
        "auth_cyrus";
...
    }
...

/etc/sasl/xmpp.conf: 

pwcheck_method: saslauthd
mech_list: PLAIN

5. Open Questions

6. FSF setup

https://vcs.fsf.org/?p=jitsi-ansible.git review

6.1. Useful snippets

- name: custom css
  lineinfile:
    path: /usr/share/jitsi-meet/css/all.css
    line: ".header-text-description, .unsupported-desktop-browser__description {display:none!important}"

- name: fellow hacker
  replace:
    path: /usr/share/jitsi-meet/interface_config.js
    regexp: "Fellow Jitster"
    replace: "Fellow Hacker"

- name: link
  replace:
    path: /usr/share/jitsi-meet/interface_config.js
    regexp: "https://jitsi.org"
    replace: "https://{{ inventory_hostname }}/"


- name: hide logo
  replace:
    path: /usr/share/jitsi-meet/interface_config.js
    regexp: "SHOW_WATERMARK_FOR_GUESTS: true,"
    replace: "SHOW_WATERMARK_FOR_GUESTS: false,"

- name: hide logo
  replace:
    path: /usr/share/jitsi-meet/interface_config.js
    regexp: "SHOW_JITSI_WATERMARK: true,"
    replace: "SHOW_JITSI_WATERMARK: false,"


- name: copy watermark logo
  copy:
    src: files/LPlogo.png
    dest: /usr/share/jitsi-meet/images/watermark.png
    owner: root
    group: root
    mode: 0444
  when: j.stat.exists

6.2. Custom index

https://vcs.fsf.org/?p=jitsi-ansible.git;a=blob;f=files/index.html;h=ab0a76f3973b53069ec884b7dcea67931c585a5f;hb=HEAD

We'll want to customize the css at least to match our usual color schema and insert the hcoop logo, and something like the blurb about the coop we include on git.hcoop.net

Also, do we want to add librejs info? Not sure what the licensing on the youtube stuff is...

7. Config changes

7.1. Performance

Recommends disabling currently speaking dot to lower client and server cpu use (fsf does this, I left it on in my testing instance): the detection apparently uses quite a bit of CPU.

Further suggested tweaks to reduce client cpu use: 

disableAudioLevels: true

DISABLE_JOIN_LEAVE_NOTIFICATIONS: true,
DISABLE_VIDEO_BACKGROUND: true,
DISABLE_FOCUS_INDICATOR: true,
DISABLE_DOMINANT_SPEAKER_INDICATOR: true,
DISABLE_VIDEO_BACKGROUND: true,

7.2. /etc/jitsi/meet/meet.hcoop.net-config.js

Update: yes, enableLayerSuspension: true is essential, it's not clear why it is not enabled by default at all.

7.3. /usr/share/jitsi-meet/interface_config.js

7.4. /usr/share/jitsi-meet/logging_config.js

Make sure we don't log more than the bare minimum.

7.5. /etc/jitsi/videobridge/config

7.6. /etc/jitsi/jicofo/config

8. Add-Ons / Etc

9. Possible Alternatives

ClintonEbadi/JitsiMeet (last edited 2021-02-09 04:31:24 by ClintonEbadi)