VPS Caddy Jitsi Meet 設定メモ

社内コミュニケーションにMattermostを利用しているが、会話なら一瞬で済む内容でも、テキストベースだと時間がかかってしまう。

かといってZoomやMeetを立ち上げるほどではないという場面のために手軽に呼び出せるJitsiプラグインを導入することにした。

Caddy

・共通ネットワーク作成
docker network create localproxy

・フォルダ準備
cd /home
mkdir caddy
cd caddy

・Caddyfile

vim Caddyfile

# Jitsi Meet
jitsi.●●●.com {
    reverse_proxy jitsi-web:80

    # WebSocket対応
    @websockets {
        header Connection *Upgrade*
        header Upgrade websocket
    }
    reverse_proxy @websockets jitsi-web:80
}

# Mattermost (Phase 2で追加)
# mattermost.●●●.com {
#     reverse_proxy mattermost:8065
# }

# MeshCentral (Phase 2で追加・IP制限付き)
# meshcentral.●●●.com {
#     @allowed remote_ip 許可IP
#     handle @allowed {
#         reverse_proxy meshcentral:443
#     }
#     respond "Forbidden" 403
# }

# Jitsi Meet

jitsi.●●●.com {

reverse_proxy jitsi-web:80

# WebSocket対応

@websockets {

header Connection *Upgrade*

header Upgrade websocket

}

reverse_proxy @websockets jitsi-web:80

}

# Mattermost (Phase 2で追加)

# mattermost.●●●.com {

# reverse_proxy mattermost:8065

# }

# MeshCentral (Phase 2で追加・IP制限付き)

# meshcentral.●●●.com {

# @allowed remote_ip 許可IP

# handle @allowed {

# reverse_proxy meshcentral:443

# }

# respond "Forbidden" 403

# }

・docker-compose.yml

vim docker-compose.yml

services:
  caddy:
    image: caddy:2
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
      - ./data:/data
      - ./config:/config
    networks:
      - localproxy

networks:
  localproxy:
    external: true

services:

caddy:

image: caddy:2

restart: unless-stopped

ports:

- "80:80"

- "443:443"

volumes:

- ./Caddyfile:/etc/caddy/Caddyfile

- ./data:/data

- ./config:/config

networks:

- localproxy

networks:

localproxy:

external: true

・コンテナ起動
docker compose up -d

Jitsi Meet

・フォルダ準備
cd /home
mkdir jitsi
cd jitsi

・docker-compose.yml

vim docker-compose.yml

services:
  # Jitsi Web (フロントエンド)
  web:
    image: jitsi/web:stable-9823
    container_name: jitsi-web
    restart: unless-stopped
    environment:
      - XMPP_SERVER=prosody
      - JICOFO_AUTH_USER=focus
      - XMPP_DOMAIN=meet.jitsi
      - XMPP_AUTH_DOMAIN=auth.meet.jitsi
      - XMPP_MUC_DOMAIN=muc.meet.jitsi
      - XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
      - XMPP_BOSH_URL_BASE=http://prosody:5280
      - TZ=Asia/Tokyo
      - PUBLIC_URL=https://jitsi.●●●.com
      - ENABLE_LOBBY=1
      - ENABLE_PREJOIN_PAGE=1
      - ENABLE_AUTH=1
      - AUTH_TYPE=jwt
      - ENABLE_GUESTS=1
      - JWT_APP_ID=mattermost
      - JWT_APP_SECRET=●●●
      - JWT_ACCEPTED_ISSUERS=mattermost
      - JWT_ACCEPTED_AUDIENCES=
    volumes:
      - ./web-config:/config
      - ./web-crontabs:/var/spool/cron/crontabs
      - ./web-transcripts:/usr/share/jitsi-meet/transcripts
    networks:
      - meet.jitsi
      - localproxy
    depends_on:
      - prosody

  # Prosody (XMPPサーバー)
  prosody:
    image: jitsi/prosody:stable-9823
    restart: unless-stopped
    environment:
      - XMPP_DOMAIN=meet.jitsi
      - XMPP_AUTH_DOMAIN=auth.meet.jitsi
      - XMPP_MUC_DOMAIN=muc.meet.jitsi
      - XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
      - JICOFO_AUTH_USER=focus
      - JICOFO_AUTH_PASSWORD=●●●
      - JVB_AUTH_USER=jvb
      - JVB_AUTH_PASSWORD=●●●
      - TZ=Asia/Tokyo
      - PUBLIC_URL=https://jitsi.●●●.com
      - ENABLE_AUTH=1
      - AUTH_TYPE=jwt
      - ENABLE_GUESTS=1
      - ENABLE_LOBBY=1
      - JWT_APP_ID=mattermost
      - JWT_APP_SECRET=●●●
      - JWT_ACCEPTED_ISSUERS=mattermost
      - JWT_ACCEPTED_AUDIENCES=
    volumes:
      - ./prosody-config:/config
      - ./prosody-plugins:/prosody-plugins-custom
    networks:
      - meet.jitsi

  # Jicofo (会議フォーカス)
  jicofo:
    image: jitsi/jicofo:stable-9823
    restart: unless-stopped
    environment:
      - XMPP_SERVER=prosody
      - XMPP_DOMAIN=meet.jitsi
      - XMPP_AUTH_DOMAIN=auth.meet.jitsi
      - XMPP_MUC_DOMAIN=muc.meet.jitsi
      - XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
      - JICOFO_AUTH_USER=focus
      - JICOFO_AUTH_PASSWORD=●●●
      - TZ=Asia/Tokyo
      - ENABLE_AUTH=1
      - AUTH_TYPE=jwt
      - ENABLE_LOBBY=1
    volumes:
      - ./jicofo-config:/config
    networks:
      - meet.jitsi
    depends_on:
      - prosody

  # JVB (ビデオブリッジ)
  jvb:
    image: jitsi/jvb:stable-9823
    restart: unless-stopped
    ports:
      - "10000:10000/udp"
    environment:
      - XMPP_SERVER=prosody
      - XMPP_DOMAIN=meet.jitsi
      - XMPP_AUTH_DOMAIN=auth.meet.jitsi
      - XMPP_MUC_DOMAIN=muc.meet.jitsi
      - XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi
      - JVB_AUTH_USER=jvb
      - JVB_AUTH_PASSWORD=●●●
      - JVB_PORT=10000
      - JVB_ADVERTISE_IPS=●●●
      - TZ=Asia/Tokyo
      - PUBLIC_URL=https://jitsi.●●●.com
    volumes:
      - ./jvb-config:/config
    networks:
      - meet.jitsi
    depends_on:
      - prosody

networks:
  meet.jitsi:
    driver: bridge
  localproxy:
    external: true

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

services:

# Jitsi Web (フロントエンド)

web:

image: jitsi/web:stable-9823

container_name: jitsi-web

restart: unless-stopped

environment:

- XMPP_SERVER=prosody

- JICOFO_AUTH_USER=focus

- XMPP_DOMAIN=meet.jitsi

- XMPP_AUTH_DOMAIN=auth.meet.jitsi

- XMPP_MUC_DOMAIN=muc.meet.jitsi

- XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi

- XMPP_BOSH_URL_BASE=http://prosody:5280

- TZ=Asia/Tokyo

- PUBLIC_URL=https://jitsi.●●●.com

- ENABLE_LOBBY=1

- ENABLE_PREJOIN_PAGE=1

- ENABLE_AUTH=1

- AUTH_TYPE=jwt

- ENABLE_GUESTS=1

- JWT_APP_ID=mattermost

- JWT_APP_SECRET=●●●

- JWT_ACCEPTED_ISSUERS=mattermost

- JWT_ACCEPTED_AUDIENCES=

volumes:

- ./web-config:/config

- ./web-crontabs:/var/spool/cron/crontabs

- ./web-transcripts:/usr/share/jitsi-meet/transcripts

networks:

- meet.jitsi

- localproxy

depends_on:

- prosody

# Prosody (XMPPサーバー)

prosody:

image: jitsi/prosody:stable-9823

restart: unless-stopped

environment:

- XMPP_DOMAIN=meet.jitsi

- XMPP_AUTH_DOMAIN=auth.meet.jitsi

- XMPP_MUC_DOMAIN=muc.meet.jitsi

- XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi

- JICOFO_AUTH_USER=focus

- JICOFO_AUTH_PASSWORD=●●●

- JVB_AUTH_USER=jvb

- JVB_AUTH_PASSWORD=●●●

- TZ=Asia/Tokyo

- PUBLIC_URL=https://jitsi.●●●.com

- ENABLE_AUTH=1

- AUTH_TYPE=jwt

- ENABLE_GUESTS=1

- ENABLE_LOBBY=1

- JWT_APP_ID=mattermost

- JWT_APP_SECRET=●●●

- JWT_ACCEPTED_ISSUERS=mattermost

- JWT_ACCEPTED_AUDIENCES=

volumes:

- ./prosody-config:/config

- ./prosody-plugins:/prosody-plugins-custom

networks:

- meet.jitsi

# Jicofo (会議フォーカス)

jicofo:

image: jitsi/jicofo:stable-9823

restart: unless-stopped

environment:

- XMPP_SERVER=prosody

- XMPP_DOMAIN=meet.jitsi

- XMPP_AUTH_DOMAIN=auth.meet.jitsi

- XMPP_MUC_DOMAIN=muc.meet.jitsi

- XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi

- JICOFO_AUTH_USER=focus

- JICOFO_AUTH_PASSWORD=●●●

- TZ=Asia/Tokyo

- ENABLE_AUTH=1

- AUTH_TYPE=jwt

- ENABLE_LOBBY=1

volumes:

- ./jicofo-config:/config

networks:

- meet.jitsi

depends_on:

- prosody

# JVB (ビデオブリッジ)

jvb:

image: jitsi/jvb:stable-9823

restart: unless-stopped

ports:

- "10000:10000/udp"

environment:

- XMPP_SERVER=prosody

- XMPP_DOMAIN=meet.jitsi

- XMPP_AUTH_DOMAIN=auth.meet.jitsi

- XMPP_MUC_DOMAIN=muc.meet.jitsi

- XMPP_INTERNAL_MUC_DOMAIN=internal-muc.meet.jitsi

- JVB_AUTH_USER=jvb

- JVB_AUTH_PASSWORD=●●●

- JVB_PORT=10000

- JVB_ADVERTISE_IPS=●●●

- TZ=Asia/Tokyo

- PUBLIC_URL=https://jitsi.●●●.com

volumes:

- ./jvb-config:/config

networks:

- meet.jitsi

depends_on:

- prosody

networks:

meet.jitsi:

driver: bridge

localproxy:

external: true

・コンテナ起動
docker compose up -d

・ufw
ufw allow 10000/udp

DNS

jitsi.●●●.comのAレコードをサーバーIPアドレスに向ける。

Mattermost

https://github.com/mattermost-community/mattermost-plugin-jitsi

Releasesからtar.gzをダウンロード。
システムコンソール>プラグイン管理>プラグインをアップロードする

プラグインを有効にする>設定

Jitsi Server URL：https://jitsi.●●●.com
Embed Jitsi video inside Mattermost：無効
Show pre-join page：有効
Jitsi Meeting Names：Random
Use JWT Authentication for Jitsi:有効
App ID for JWT Authentication：mattermost
App Secret for JWT Authentication：Jitsiと同じ秘密鍵