Jitsi Meet - Secure Self-Hosted Video Conferencing

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Overview

Jitsi Meet is a popular free and open source video conferencing platform with a large, active community. It provides browser based audio and video meetings with screen sharing, in-call chat, raise-hand and reactions, breakout rooms, and recording, all with no client software to install and no per-seat licensing. This image runs the complete single-node Jitsi stack and exposes the full meeting experience through a browser, so you get a private, self hosted conferencing service you run and control yourself rather than depending on a third party meeting provider. It is delivered fully installed and secured so a working server is operational within minutes of launch.

## Why This Image vs a Manual Install

Compared to installing Jitsi yourself, this image eliminates the manual apt repository setup, the interactive debconf prompts for the public hostname and TLS certificate, the multi-service configuration across prosody, jicofo, the video bridge and nginx, and the security hardening. A default Jitsi install lets anyone who can reach the server open a room; this image does not ship that way. What typically requires many steps across package management, service configuration and security hardening is completed for you at image build time. You launch the instance, read your unique moderator credential, and start hosting meetings.

## Application Stack

The jitsi-meet metapackage is installed from the official Jitsi repository and pulls in the four components of the stack: prosody (the XMPP signalling server), jicofo (the conference focus that assigns participants to the bridge), jitsi-videobridge2 (the WebRTC Selective Forwarding Unit that routes media), and nginx (which serves the meet web application over HTTPS and proxies the signalling). systemd starts every component on boot and restarts it on failure. The prosody virtual-host data and account store live on a dedicated data volume, independently resizable and separate from the OS disk.

## Security Hardening

This image follows a defence-in-depth approach with the following hardening measures applied:

• Secure-domain authentication: prosody is configured so only an authenticated moderator can CREATE a room, while invited guests join an already-open room without a login; no room can be created anonymously
• No default or shared credentials: a cryptographically random 24-character moderator password is generated on each instance's first boot and written only to a root-only file, so no two deployments share a credential and no default login is reachable
• Per-instance identity: the server hostname and a matching self-signed TLS certificate are regenerated on first boot for the instance's own address
• Encrypted transport: the meeting web app is served only over HTTPS on port 443, with HTTP on port 80 redirecting to it
• Dedicated data volume: the XMPP authentication state lives on its own disk, independently resizable and surviving OS-disk changes
• Automatic restart: systemd monitors prosody, jicofo, the video bridge and nginx and restarts them on failure

Buyers requiring formal compliance documentation should contact cloudimg to discuss specific requirements.

## Ready to Use

Read your moderator credential from the root-only file, open the web interface in your browser, sign in as the moderator to open a room, and share the room link; invited participants join with one click and no login. For production use, point your own domain at the instance and obtain a trusted Let's Encrypt certificate as described in the user guide.

## AWS Integration

Deploy on any EC2 instance type. Open UDP port 10000 in the security group for the WebRTC video bridge media, in addition to TCP 80 and 443 for the web app. Back up the XMPP authentication volume using EBS snapshots or AWS Backup. Resize the dedicated data volume independently of the OS disk as your deployment grows.

## Use Cases

• A private, self-hosted video conferencing service you run and control in your own account rather than depending on a third party meeting provider
• Secure team meetings, webinars and screen-sharing sessions where only an authenticated moderator can open rooms and guests join by link
• An organisation that needs conferencing on its own infrastructure for data-residency, privacy or cost reasons

## cloudimg Support

24/7 technical support by email and chat. Help with deployment, pointing your own domain at the instance and terminating a trusted Let's Encrypt certificate, opening the UDP 10000 media port, moderator account management, and backup planning for your authentication state.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.