Jitsi Docker Plugins and Third-Party Software Catalog
This is a practical DevOps checklist for a self-hosted Jitsi Meet deployment running with Docker Compose. The official Docker stack is based around web, prosody, jicofo, and jvb, with optional Compose overlays for services like jibri, jigasi, etherpad, whiteboard, transcriber, grafana, prometheus, rtcstats, and log analysis. ([GitHub][1])
1. Core Jitsi Docker Components
| Component |
Purpose |
Docker Service |
| Jitsi Meet Web |
Frontend web UI, Nginx, static assets, external API |
web |
| Prosody |
XMPP server used for signaling, auth, room control |
prosody |
| Jicofo |
Conference focus, room/session orchestration |
jicofo |
| Jitsi Videobridge |
SFU media bridge for audio/video routing |
jvb |
| Jibri |
Recording and live streaming worker |
jibri |
| Jigasi |
SIP gateway and dial-in/dial-out support |
jigasi |
| Jitsi Transcriber |
Speech-to-text transcription support |
transcriber |
| JaaS Components |
Hosted Jigasi-style components from 8x8/JaaS |
optional |
2. Official Optional Docker Overlays
| Overlay File |
Feature |
Use Case |
jibri.yml |
Recording and streaming |
Record meetings, stream to YouTube/RTMP |
jigasi.yml |
SIP gateway |
Connect SIP PBX, PSTN, VoIP users |
etherpad.yml |
Shared documents |
Collaborative meeting notes |
whiteboard.yml |
Excalidraw whiteboard |
Collaborative drawing/whiteboard |
transcriber.yml |
Transcription |
Meeting captions/transcripts |
grafana.yml |
Grafana dashboard |
Metrics visualization |
prometheus.yml |
Metrics scraping |
Monitoring Jitsi services |
rtcstats.yml |
WebRTC analytics |
Client-side WebRTC quality data |
log-analyser.yml |
Log analysis |
Loki/OpenTelemetry/Grafana log view |
The official Docker guide shows these overlays being started with commands like docker compose -f docker-compose.yml -f jibri.yml up -d, and similar combinations for Jigasi, Etherpad, whiteboard, transcriber, Grafana, and log analysis. ([Jitsi][2])
3. Reverse Proxy and TLS Software
| Software |
Purpose |
Docker-Friendly |
Notes |
| Nginx |
Reverse proxy, TLS termination, HTTP routing |
Yes |
Common production choice |
| Traefik |
Dynamic reverse proxy for Docker labels |
Yes |
Good for multi-service Docker hosts |
Jitsi Docker requires a real PUBLIC_URL for production deployments, and the official .env includes Let’s Encrypt-related settings such as domain, email, staging mode, and ACME server selection. ([Jitsi][2])
4. NAT, STUN, and TURN
| Software |
Purpose |
When to Use |
| coturn |
TURN/STUN relay server |
Required for reliable calls behind strict NAT/firewalls |
| Google STUN |
Public STUN service |
Basic NAT discovery, not enough for all networks |
| Custom STUN |
Your own STUN endpoint |
Controlled infrastructure |
| TURN over TCP 443 |
Firewall bypass |
Corporate networks that block UDP |
| TURN over TLS 5349 |
Secure TURN relay |
Better for enterprise deployments |
Jitsi can use a TURN server for cases where direct peer-to-peer connectivity fails; the official TURN guide discusses coturn, XMPP-delivered TURN credentials, UDP 3478, TCP/TLS 5349, and using port 443 for restrictive networks. ([Jitsi][3])
5. Authentication and SSO
| Tool |
Integration Type |
Notes |
| Internal Prosody Auth |
Username/password inside Prosody |
Simple small deployment |
| JWT Auth |
Token-based authentication |
Best for custom apps and portals |
| LDAP |
Directory authentication |
Enterprise user directories |
| Active Directory |
LDAP/SASL integration |
Corporate auth |
| OpenLDAP |
LDAP backend |
Self-hosted directory |
| Keycloak |
OIDC/SAML identity provider |
Usually integrated through JWT adapters |
| authentik |
OIDC/SAML identity provider |
Good self-hosted SSO option |
| Authelia |
SSO and access control |
Usually used in front of apps |
| Dex |
Lightweight OIDC provider |
Kubernetes-friendly |
| OAuth2 Proxy |
Auth gateway |
Can protect Jitsi landing pages or custom portals |
| jitsi-OIDC-adapter |
OIDC to Jitsi JWT bridge |
Community integration |
| jitsi-OIDC-SAML-adapter |
OIDC/SAML to Jitsi JWT bridge |
Community integration |
| nordeck/jitsi-keycloak-adapter |
Keycloak adapter |
Dockerized Jitsi integration |
The official Docker .env supports AUTH_TYPE=internal, jwt, ldap, or matrix, and includes JWT and LDAP configuration fields. Jitsi’s JWT auth plugin verifies client connections using JWT and supports shared-secret or public-key validation. ([GitHub][4])
6. SIP, VoIP, and Telephony
| Software |
Purpose |
Works With |
| Jigasi |
Jitsi SIP gateway |
SIP providers, PBX, PSTN |
| Asterisk |
PBX server |
Jigasi |
| FreePBX |
Asterisk management UI |
Jigasi |
| FreeSWITCH |
PBX/media server |
Jigasi |
| Kamailio |
SIP proxy |
Large SIP routing |
| OpenSIPS |
SIP proxy |
Large SIP routing |
| SIP provider account |
External calling |
Jigasi |
| Twilio Elastic SIP Trunking |
SIP trunk |
Jigasi/Asterisk |
| Telnyx SIP |
SIP trunk |
Jigasi/Asterisk |
| VoIP.ms |
SIP trunk |
Jigasi/Asterisk |
| SignalWire |
SIP/telephony |
Jigasi/Asterisk |
Jitsi Docker’s .env includes Jigasi SIP settings such as SIP URI, SIP password, SIP server, SIP port, and SIP transport. ([GitHub][4])
7. Recording, Streaming, and Storage
| Software |
Purpose |
Notes |
| Jibri |
Recording and streaming |
Official Jitsi recording component |
| FFmpeg |
Media processing |
Used in recording/streaming workflows |
| Google Chrome/Chromium |
Headless capture for Jibri |
Required by Jibri |
| ALSA/PulseAudio |
Audio capture stack |
Used by Jibri |
| YouTube Live |
RTMP streaming target |
Jibri can stream to RTMP |
| Twitch |
RTMP streaming target |
Possible with stream key |
| Facebook Live |
RTMP streaming target |
Possible with stream key |
| Nginx RTMP Module |
Self-hosted RTMP endpoint |
Internal streaming pipeline |
| Owncast |
Self-hosted live streaming |
RTMP target |
| Restream |
Multi-platform streaming |
RTMP target |
| MinIO |
S3-compatible object storage |
Store recordings |
| AWS S3 |
Object storage |
Store recordings |
| Wasabi |
S3-compatible storage |
Store recordings |
| Backblaze B2 |
Object storage |
Store recordings |
| rclone |
Upload/sync recordings |
Post-recording automation |
8. Collaboration Add-ons
| Software |
Purpose |
Integration Style |
| Etherpad |
Shared document editing |
Official Docker overlay |
| Excalidraw |
Whiteboard |
Official whiteboard overlay |
| Nextcloud |
Files, calendar, office docs |
External integration |
| OnlyOffice |
Document editing |
With Nextcloud or standalone |
| Collabora Online |
Document editing |
With Nextcloud |
The official Docker setup has direct support for Etherpad document sharing and an Excalidraw-based virtual collaborative whiteboard. ([Jitsi][2])
9. Chat and Team Platform Integrations
| Platform |
Integration Method |
Notes |
| Matrix / Element |
Matrix auth or meeting integration |
Jitsi can be used from Matrix rooms |
| Mattermost |
Jitsi plugin/integration |
Team chat video calls |
| Rocket.Chat |
Jitsi integration |
Team chat video calls |
| Nextcloud Talk / Nextcloud |
External meeting links or app integration |
Good self-hosted suite |
| Moodle |
Jitsi plugin |
Education/LMS |
10. Web and App Embedding
| Tool |
Purpose |
Notes |
| Jitsi IFrame API |
Embed meetings in websites/apps |
Official supported method |
| External API JS |
Browser-side meeting control |
Loaded from /external_api.js |
| lib-jitsi-meet |
Low-level JS library |
Build custom video apps |
The official IFrame API lets you embed Jitsi Meet into your own application, and the event API allows listening to meeting events through JitsiMeetExternalAPI. ([Jitsi][5])
11. Prosody Plugins and XMPP Modules
| Plugin / Module Type |
Purpose |
| Custom Prosody modules |
Add custom XMPP behavior |
| JWT auth module |
Token authentication |
| LDAP/SASL auth module |
Enterprise directory auth |
| MUC modules |
Room behavior customization |
| Lobby modules |
Guest waiting room behavior |
| MUC size module |
Room participant metrics |
| MUC domain mapper |
Multi-domain setups |
| Token moderation |
Moderator control from JWT |
| Room metadata modules |
Store extra room info |
| Reservation modules |
Room booking or room validation |
| External services module |
TURN credential delivery |
| Rate limiting modules |
Abuse protection |
| Anti-spam modules |
Public server protection |
| Webhook-style custom module |
Send events to external backend |
| Custom access control module |
Per-room or per-user policy |
For Docker deployments, custom Prosody plugins are usually mounted into the Prosody config/plugin path and enabled through Prosody/Jitsi configuration. The official Docker guide creates a prosody/prosody-plugins-custom directory for custom plugin use. ([Jitsi][2])
12. Monitoring and Observability
| Software |
Purpose |
Notes |
| Prometheus |
Metrics collection |
Official Docker overlay exists |
| Grafana |
Dashboards |
Official Docker overlay exists |
| Jitsi Meet Exporter |
Prometheus exporter |
Exposes Jitsi metrics |
| Loki |
Log aggregation |
Used in log analyzer stack |
| OpenTelemetry |
Telemetry/log pipeline |
Used in log analyzer stack |
The Jitsi Docker repository includes prometheus.yml, grafana.yml, rtcstats.yml, and log-analyser.yml; the log analyser uses Grafana Loki and OpenTelemetry for log management and analysis. ([GitHub][1])
