Jitsi-meet: how to enable authentication?

Help
1

Hi,

thanks for packaging jitsi-meet. It works well but I am stuck with my attempt to enable authentication. I tried to follow the instructions given here but failed so far. The following configuration is my best attempt, it asks me for my credentials but then only displays “Connecting”:

jicofo.config = {
  "org.jitsi.jicofo.auth.URL" = "XMPP:meet.example.com";
};
jitsi-meet = {
  enable = true;
  hostName = "meet.example.com";
  config = {
    hosts.anonymousdomain = "guest.meet.example.com";
    enableInsecureRoomNameWarning = true;
    fileRecordingsEnabled = false;
    liveStreamingEnabled = false;
    prejoinPageEnabled = true;
  };
};
jitsi-videobridge.openFirewall = true;
prosody = {
  allowRegistration = true;
  virtualHosts."meet.example.com".enabled = pkgs.lib.mkForce false;
  virtualHosts.jitsi-main = {
    enabled = true;
    domain = "meet.example.com";
    extraConfig = ''
      authentication = "internal_hashed";
      admins = { "focus@auth.meet.example.com" };
    '';
    ssl = {
      cert = "/var/lib/jitsi-meet/jitsi-meet.crt";
      key = "/var/lib/jitsi-meet/jitsi-meet.key";
    };
  };
  virtualHosts.jitsi-guest = {
    enabled = true;
    domain = "guest.meet.example.com";
    extraConfig = ''
      authentication = "anonymous";
      c2s_require_encryption = false;
    '';
  };
};

Any help is appreciated.

1 Like
2

few months back I made Jitsi work on one of the cloud boxes you can check the configs I used

3

Got it to work somehow. Now also the guests need to authenticate. Not exactly what I was looking for but better than nothing.

jicofo.config = {
  "org.jitsi.jicofo.auth.URL" = "XMPP:meet.example.com";
};
jitsi-meet = {
  enable = true;
  hostName = "meet.example.com";
  config = {
    authdomain = "meet.example.com";
    enableInsecureRoomNameWarning = true;
    fileRecordingsEnabled = false;
    liveStreamingEnabled = false;
    prejoinPageEnabled = true;
  };
};
jitsi-videobridge.openFirewall = true;
prosody = {
  allowRegistration = true;
  virtualHosts."meet.example.com" = {
    extraConfig = ''
      authentication = "internal_hashed"
    '';
  };
};
2 Likes
4

Thanks for the example you’ve given. Have you since found another solution where the guest did not need to authenticate?

I tried following your example and https://jitsi-club.gitlab.io/jitsi-self-hosting/en/01-deployment-howto/01-authentication/ but it left me with a subtly broken system…

Also: have you tried to use the configured prosody server for normal XMPP clients?

5

Mradke via NixOS Discourse nixos1@discoursemail.com writes:

Thanks for the example you’ve given. Have you since found another solution where the guest did not need to authenticate?

No, sorry. I did not look further for another solution, the one
mentioned above was sufficient for my use case.

I tried following your example and https://jitsi-club.gitlab.io/jitsi-self-hosting/en/01-deployment-howto/01-authentication/ but it left me with a subtly broken system…

Also: have you tried to use the configured prosody server for normal XMPP clients?

No.

1 Like