> For the complete documentation index, see [llms.txt](https://docs.glesys.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.glesys.com/products/compute/one-click-installers/details/jitsi-meet-in-glesys-cloud-this-is-how-its-set-up.md).

# Jitsi Meet in Glesys Cloud ­– this is how it's set up

***

Jitsi Meet is an open‑source video‑conferencing solution—completely free and easy to use. Some advantages of the service:

* Runs video calls directly in the browser (Chrome offers the best performance) on your computer. Apps are also available for iPhone and Android.
* Requires no account or login.
* Provides a fully encrypted solution.

## VPS platform and operating system

A VPS on the new KVM platform is set up with the latest Ubuntu LTS.

The server receives the following specifications: 2 × vCPU, 2 GB RAM, and 10 GB storage.

## Jitsi Meet and Docker

Jitsi Meet is deployed as a Docker container using Docker Compose.

You can find the configuration that is used on the server in the directory `/root/docker-jitsi-meet/.env`

To modify the configuration file, run the following commands:

{% code title="Commands" %}

```
sudo -i
cd /root/docker-jitsi-meet/
nano .env
```

{% endcode %}

Then, restart the service:

{% code title="Command" %}

```
docker-compose up -d
```

{% endcode %}

## Firewall

A firewall is automatically configured and set up by Glesys in Ubuntu (UFW). SSH and the ports used by Jitsi Meet are allowed:

* SSH (TCP)
* HTTP (TCP)
* HTTPS (TCP)
* 10000:20000 (UDP) – these ports are used by Jitsi

## Fail2ban

Fail2ban is installed and configured by Glesys.

Fail2ban is a smart tool that monitors log files for various services to detect brute‑force attacks and vulnerabilities. For example, if too many login attempts are made from a single IP address, that address is automatically blacklisted in the firewall.

## Unattended upgrades

Unattended Upgrades is enabled by default in our Ubuntu template, and it is the same here. The scheduler `unattended-upgrades` is configured to install updated packages and security updates automatically.
