The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Short answer: Run Jitsi Meet either with Jitsi’s Docker Compose release or with its Debian/Ubuntu packages. You need a publicly reachable Linux VPS, a DNS name such as meet.example.org, administrative access, and control of the firewall. Point an A record at the server, allow web and media traffic, complete the HTTPS certificate setup, and verify a room from two separate clients.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
What self-hosting Jitsi Meet involves
A self-hosted deployment puts the meeting web application and its signaling and media services on infrastructure you administer. Participants visit your hostname in a browser; the server presents the web client, coordinates room membership, and routes audio and video between browsers.
As an Amazon Associate I earn from qualifying purchases.
This is not a single daemon. A normal installation includes a web server, Prosody, Jicofo and Jitsi Videobridge. HTTPS, DNS, firewall rules and (when necessary) NAT or TURN configuration are part of the deployment rather than optional finishing work.
The service architecture
| Component | Role | When you need it |
|---|---|---|
| Web/Nginx | Serves the browser client and terminates HTTPS. | Every deployment. |
| Prosody | Provides XMPP signaling and room coordination. | Every deployment. |
| Jicofo | Selects a videobridge and manages the conference focus. | Every deployment. |
| Jitsi Videobridge | Routes audio and video packets between participants. | Every deployment. |
| Jigasi | Optional SIP gateway for telephone audio. | Only when SIP telephony is required. |
| Jibri | Optional worker for recording or live broadcasting. | Only when you need recording or streaming. |
Choose Docker Compose or Debian/Ubuntu packages
Both supported routes deploy the same Jitsi service architecture. Choose the one that matches how you operate servers.
#1 Best Overall
- 【Full HD 1080P Webcam】Powered by a 1080p FHD two-MP CMOS, the NexiGo N60 Webcam produces exceptionally sharp and clear videos at resolutions up to 1920 x 1080 with 30fps. The 3.6mm glass lens provides a crisp image at fixed distances and is optimized between 19.6 inches to 13 feet, making it ideal for almost any indoor use.
- 【Wide Compatibility】Works with USB 2.0/3.0, no additional drivers required. Ready to use in approximately one minute or less on any compatible device. Compatible with Mac OS X 10.7 and higher / Windows 7, 8, 10 & 11 / Android 4.0 or higher / Linux 2.6.24 / Chrome OS 29.0.1547 / Ubuntu Version 10.04 or above. Not compatible with XBOX/PS4/PS5.
- 【Built-in Noise-Cancelling Microphone】The built-in noise-canceling microphone reduces ambient noise to enhance the sound quality of your video. Great for Zoom / Facetime / Video Calling / OBS / Twitch / Facebook / YouTube / Conferencing / Gaming / Streaming / Recording / Online School.
- 【USB Webcam with Privacy Protection Cover】The privacy cover blocks the lens when the webcam is not in use. It's perfect to help provide security and peace of mind to anyone, from individuals to large companies. 【Note:】Please contact our support for firmware update if you have noticed any audio delays.
- 【Wide Compatibility】Works with USB 2.0/3.0, no additional drivers required. Ready to use in approximately one minute or less on any compatible device. Compatible with Mac OS X 10.7 and higher / Windows 7, 10 & 11, Pro / Android 4.0 or higher / Linux 2.6.24 / Chrome OS 29.0.1547 / Ubuntu Version 10.04 or above. Not compatible with XBOX/PS4/PS5.
| Route | How services run | Best fit | Important qualification |
|---|---|---|---|
| Docker Compose | Web, Prosody, Jicofo and Videobridge run in separate containers. | Administrators who want an isolated, reproducible stack and container-based updates. | Use the directory layout shipped with the release you download. The documented layout applies to stable-11146 and newer; do not assume older releases use identical paths. |
| Debian/Ubuntu packages | Services install directly on the host and are managed as system services. | Administrators who prefer native packages, host-level logs and conventional service management. | The current quick-start supports Debian 12 (Bookworm) or newer and Ubuntu 24.04 (Noble Numbat) or newer, with OpenJDK 17. |
Do not mix the two procedures on one host unless you have a specific architecture and understand which process owns each port. Pick one route, follow its release-specific documentation, and keep the installation files and configuration under a deliberate backup plan.
Prepare the VPS, hostname and network
Server prerequisites
- A Linux VPS or server with a public route to the Internet.
- Root access or a sudo-capable administrator account.
- A fully qualified domain name, for example
meet.example.org. - Ability to change DNS and to edit both the VPS provider’s security group and the operating-system firewall.
- For package installation, a supported Debian or Ubuntu release and OpenJDK 17. Ubuntu installations need the
universerepository enabled.
Update the operating system before installing Jitsi. Install only the dependencies required by your chosen route. The package procedure lists gnupg2, nginx-full, sudo when it is used, and either curl or wget.
Recommended Free Tools
DNS and NAT
- Reserve or identify the server’s public IPv4 address.
- Create an A record for your meeting hostname that points to that address. Allow time for the record to propagate before requesting a certificate.
- If the server is behind NAT, point the record at the router’s public address and forward the required inbound ports to the Jitsi host.
- Confirm from an external network that the hostname resolves to the intended public address. A record aimed at an old address will break both HTTPS issuance and media connectivity.
Use a hostname dedicated to the meeting service. The installer and certificate tooling use that name when generating Nginx, Prosody and Videobridge configuration.
Open the required firewall ports
Apply rules in both layers: the VPS provider’s security group and the host firewall. A rule in only one layer is not sufficient.
Rank #2
- Compatible with Nintendo Switch 2’s new GameChat mode
- HD lighting adjustment and autofocus: The Logitech webcam automatically fine-tunes the lighting, producing bright, razor-sharp images even in low-light settings. This makes it a great webcam for streaming and an ideal web camera for laptop use
- Advanced capture software: Easily create and share video content with this Logitech camera that is suitable for use as a desktop computer camera or a monitor webcam
- Stereo audio with dual mics: Capture natural sound during calls and recorded videos with this 1080p webcam, great as a video conference camera or a computer webcam
- Full HD 1080p video calling and recording at 30 fps. You'll make a strong impression with this PC webcam that features crisp, clearly detailed, and vibrantly colored video
| Port | Protocol | Purpose | Requirement |
|---|---|---|---|
| 80 | TCP | HTTP access, including Let’s Encrypt validation and an optional redirect to HTTPS. | Required for initial certificate issuance and commonly retained for renewal. |
| 443 | TCP | Encrypted web access for the Jitsi client. | Required for normal browser connections. |
| 10000 | UDP | Jitsi Videobridge audio and video media. | Required for the basic direct-media path. |
| 22 (or your custom SSH port) | TCP | Administration. | Keep restricted to trusted source addresses where practical. |
| 3478 | UDP | Optional coturn/STUN/TURN service. | Open only when you enable that service. |
| 5349 | TCP | Optional TURN-over-TLS or TCP fallback. | Open only when your TURN design requires it. |
Keep Prosody, Jicofo and other internal component or XMPP ports private. They should communicate over the local host or private network, not be exposed as public Internet services.
Install with Docker Compose
The Docker guide expects a release archive rather than a source-repository checkout. Download the latest Jitsi release archive from the official distribution instructions and work inside the extracted release directory.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors- Extract the archive and change into its release directory.
- Copy the sample environment file:
cp env.example .env. - Generate unique service credentials with
./gen-passwords.sh. Treat the resulting values as secrets and do not commit them to a public repository. - Create the persistent configuration directories documented by that release. Use the paths shipped with the archive; the layout for
stable-11146and later is not a promise about older layouts. - Set the public hostname in
.envand review the HTTP and HTTPS port variables. If the host has several addresses or sits behind NAT, setDOCKER_HOST_ADDRESSto the address that remote participants can actually reach. - Review
HTTP_PORTandHTTPS_PORTagainst your firewall and any existing reverse proxy. Do not bind two applications to the same host port. - Start the stack with
docker compose up -d. - Check that the web, Prosody, Jicofo and Videobridge containers are running, then inspect their logs before inviting users.
Docker publishes the web and media ports from the Compose configuration. If you change a published port, change the corresponding security-group and host-firewall rule as well. Keep the persistent configuration directories in your backup set; recreating containers without them can discard generated configuration and credentials.
Install with Debian or Ubuntu packages
Use this route only on a supported operating system: Debian 12 or newer, or Ubuntu 24.04 or newer. The package quick-start explicitly requires OpenJDK 17.
Rank #3
- Full HD 1080P Webcam with Cover for Video Calls - EMEET computer webcam provides design and Optimization for professional video streaming. Realistic 1920 x 1080p video, 5-layer anti-glare lens, providing smooth video. The fixed focal length makes the object in the focal length range of 11.8-118.1 inches, so as to provide a clearer image. The C960 usb webcam has a cover and can be removed automatically to meet your needs for protection. It is a great choice for home office.
- Built-in 2 Noise Reduction Mics - EMEET webcam with microphone for desktop is 2 built-in omnidirectional noise reduction microphones, picking up your voice and filtering out background noise to create an excellent radio effect.EMEET computer webcam enables you to enjoy crystal clear voice for communication. (When installing the web camera, remember to select EMEET C960 usb webcam as the default device for the microphones)
- Low Dependence on Light Condition - Automatic low-light correction technology is applied in EMEET HD webcam 1080p so that the streaming webcam could capture the image in dim light. EMEET C960 camera for computer also has low-light boost, color boost and adjust exposure so you look your best, even in dim and harsh lighting. Imagine you are working in front of a sunny window. Is it convenient for no need to draw the curtains first when a video call comes in to get a normal exposure picture?
- Plug-and-play & 90 Degrees Wide View - No driver required. EMEET C960 pc webcam can be used without drivers to realize plug and play for saving your trouble. The convenient foldable design of web camera allows you to take it anywhere, and the USB cord is long enough for any task. The 90° wide-angle lens of USB camera can accommodate more participants. In video calls, there is no need to frequently adjust the direction of the web cam to show people in different positions.
- High Compatibility & Multi Application - C960 webcam for laptop is compatible with Windows 10/11, MacOS10.14 or later, Linux, Android TV 7.0 or later. The compatibility of the streaming camera is super wide for major software like Zoom, Teams, Facetime, Google Meet, YouTube and more. Whether this web camera is used for online studying/ teaching, home office, conference, meeting or video calling, the web camera is perfectly suitable for you as a tripod-ready universal clip. (Tips: Incompatible with Windows Hello functions)
- Set the machine’s hostname to the same fully qualified name you will use for the meeting service, and verify that local hostname resolution is coherent.
- Update package indexes and install the listed prerequisites, including
gnupg2,nginx-full,curlorwget, andsudowhen needed. On Ubuntu, enableuniverse. - Add Jitsi’s package repository and signing key using the commands in the current official quick-start. Avoid substituting an unrelated or obsolete repository.
- Refresh package indexes and install
jitsi-meet. - When prompted for the hostname, enter the public FQDN, such as
meet.example.org, exactly as it appears in DNS. - Choose the TLS option offered by the installer. A publicly resolvable name and reachable port 80 are needed for an automatically issued Let’s Encrypt certificate.
- After installation, inspect the generated Nginx, Prosody, Jicofo and Videobridge service definitions and confirm that each service is enabled and running.
Package-managed files live in host locations and are updated through the system package manager. Keep a record of local configuration changes so an upgrade does not overwrite an intentional firewall, NAT or authentication setting.
Free tools Windows power users keep installed
One-click scans. No signup required.
Get HTTPS and room access right
Certificate issuance and renewal
Let’s Encrypt validation requires the hostname to resolve to the server that is answering and TCP port 80 to reach the web service. If issuance fails, test DNS and external reachability before changing Jitsi settings. Once HTTPS is working, decide whether all HTTP requests should redirect to HTTPS and verify that the redirect does not loop through a proxy or load balancer.
Open rooms versus authenticated moderators
A link-only room is convenient but lets anyone who obtains the room name attempt to join. For controlled meetings, configure Prosody authentication and moderator controls according to the Jitsi instructions for your installation method. Keep the distinction clear: authenticating room creators or moderators is not the same as publishing internal XMPP or component ports. Those internal ports remain private.
Validate your first meeting
- Open
https://meet.example.orgin a browser and verify the certificate is trusted. - Create a room and join it from a second browser profile, device or network. Using two clients catches one-way media problems that a single tab can hide.
- Grant microphone and camera permissions in both clients.
- Speak and enable video in each direction. Confirm that both clients receive audio and video rather than merely seeing the room interface.
- On the server, inspect Docker Compose logs or the package-service logs for the web service, Prosody, Jicofo and Videobridge.
- Repeat the test from a network different from the VPS provider’s network, such as a mobile connection, before treating the deployment as ready for guests.
Troubleshoot by symptom
The certificate cannot be issued
- Check that the FQDN resolves publicly to the current server address.
- Confirm that the provider security group and host firewall both allow inbound HTTP.
- Make sure another web server, proxy or stale container is not answering the validation request.
- After correcting DNS or routing, retry the certificate operation and verify renewal on a non-production hostname or maintenance window.
The page is blank or redirects repeatedly
- Check the Nginx or web container status and its logs.
- Compare the configured HTTP and HTTPS bindings with the ports exposed by Docker or the package installation.
- If a reverse proxy is in front, ensure it forwards the original HTTPS scheme correctly and is not sending traffic back to an HTTPS listener that expects a direct client.
- Clear a cached redirect in the browser only after server-side bindings are correct; caching cannot fix a listener conflict.
Participants join but have no audio or video
- Verify the Videobridge media rule is present in both firewall layers and that the provider is not filtering UDP.
- Check the server’s advertised public or NAT address. A bridge that advertises a private address can signal successfully while sending media to an unreachable destination.
- If participants are on restrictive networks, configure the documented coturn/TURN path and open its required ports. TURN adds another service to monitor; it is not a substitute for correcting a blocked or misaddressed direct path.
- Compare Videobridge logs with browser diagnostics to determine whether packets leave the bridge and whether the clients receive them.
Rooms fail to start
- Inspect Prosody and Jicofo logs for authentication, component-connection or conference-focus errors.
- Verify that the generated service passwords are consistent across the configuration files. Regenerating one password without updating its consumer can break startup.
- Check that the hostname is identical in DNS, the web configuration, Prosody and Videobridge settings.
It works locally but not from outside
- Test through the public hostname rather than a private address.
- Review NAT forwarding, the bridge’s public address setting and the cloud security-group rules.
- Confirm that local success is not coming from a hairpin path that bypasses the public firewall.
Use TURN, recording, SIP and multiple bridges deliberately
TURN/coturn
TURN relays traffic for participants whose networks block direct UDP or otherwise prevent a usable peer path. Enable it when your audience includes such networks, but plan for the additional service, credentials, ports and bandwidth. A TURN deployment does not remove the need for a correctly configured Videobridge.
Rank #4
- 【4K ULTRA HD FOR PROFESSIONAL VIDEO】 Upgrade your online presence with 4K resolution. Delivering sharp and vivid image quality, this high-definition webcam ensures crystal-clear, true-to-life video for business meetings and online presentations, helping you maintain a professional edge on screen.
- 【INTEGRATED MICROPHONE FOR COMMUNICATION】 Stay connected effortlessly. The built-in microphone naturally captures your voice for clear daily communication. It provides a reliable all-in-one audio and video solution for your daily Zoom meetings, virtual classes, and casual video chats without needing extra gear.
- 【PHYSICAL PRIVACY SHUTTER & SECURITY】 Protect your digital privacy with a simple slide. This web camera features a built-in physical privacy cover that allows you to mechanically block the lens when not in use. It is a secure solution for your home office, keeping your workspace private and safe.
- 【HASSLE-FREE PLUG AND PLAY SETUP】 Get to work in seconds with no technical skills required. Simply plug the USB cable into your laptop or PC and it is ready to use immediately—no complicated software or drivers to download. A dependable tool designed for a seamless user experience.
- 【UNIVERSAL COMPATIBILITY FOR OFFICE】 Engineered to work flawlessly across major platforms including Windows and macOS. Whether you are using Microsoft Teams, Skype, or Google Meet, this versatile camera is the perfect choice for professional remote work, telehealth, and online teaching.
Jibri recording and live broadcast
Jibri is a separate worker for recording or live streaming. Add it only when that function is required, and account for its service lifecycle and storage or streaming destination. Do not assume that enabling a recorder on the main meeting host is equivalent to designing a reliable recording system.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Jigasi telephone access
Jigasi provides a SIP gateway for audio calls. It is an optional telephony integration, not a prerequisite for browser meetings, and requires its own SIP credentials and network policy.
Additional Videobridges
A single bridge may be adequate for a small installation. The official scalable design treats multiple bridges and region-aware routing as a separate deployment: add bridges only after measuring your meeting pattern and planning how Jicofo will select them. There is no universal participant-capacity number published for every VPS size or workload, so do not advertise a fixed limit without representative load testing.
Quick Recap
Operate the server safely
- Keep the operating system, Docker engine or package set, and Jitsi release current according to their supported upgrade paths.
- Back up persistent Docker configuration or host-level configuration before upgrades. Store generated passwords securely and restrict their permissions.
- Monitor disk, memory, CPU, network throughput and service logs. Recording, TURN relay traffic and additional bridges change resource demand.
- Restrict SSH access, use key authentication where possible, and avoid exposing internal XMPP or component listeners.
- Document DNS, firewall, NAT, certificate and authentication decisions so another administrator can recover the service.
- Test certificate renewal and a two-client call after maintenance, not just whether the landing page responds.
Deployment checklist
- Supported Linux host with administrative access.
- FQDN A record resolving to the reachable public address.
- Required provider and host firewall rules applied.
- One installation route selected: Docker Compose or native Debian/Ubuntu packages.
- Public hostname entered consistently in every generated configuration.
- HTTPS certificate issued and HTTP redirect behavior verified.
- Two-client audio and video test completed from an external network.
- Logs, backups, update procedure and optional-service plan documented.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
