A walk through of installing Synapse+Riot+Jitsi from scratch on Debian

matrix.org/blog/2020/04/06/ru...

[@young2k15]

I don't mean to come across as dense or patronizing but setting up a matrix synapse is as easy as he makes it appear. One thing I would like to emphasize is to do everything in the order shown is this video it will save you from headaches.

[@researchforumonline]

Maybe if you are not a coder but a code editor it is difficult especially the part of doing Postgres and installing the client riot on a different server, i agree with your statement if you are referring to script makers. Mathew should be doing all the tutorials 1 time and he can chill after that one more tutorial we need to do a full production-ready setup for basic calls and video calls etc. I see he tried to dumb it down as best he could but it needs to be dumber so people like me can install and setup faster. Had to learn more nginx stuff and matrix synapse commands before successfully completing the task of installing matrix.

[@ukaszn3349]

Matrixdotorg - there's something about your way of doing this - it feels extreamly profesional and easy to follow at once - can't way to see more of your videos! Thanks a lot sir!

[@hiteshsaini7184]

bro, element/riot is not using jitsi. it is using some other client. can you tell me what can be the reason.

[@StreamingAndrew]

I love your voice and I'm a straight 42 year old guy. Thanks for this!

[@Kryptstar_mack]

hmmm, are you really straight? no straight man has a kitty cat as a profile pic.... did I just say kitty cat? maybe I am gay, oh god identity crisis

[@pnw4x447]

Thanks for the vid! I admittedly blasted through the steps on your Matrix post, but got everything up and running without too much trouble. I'm gonna go play with my new toy now!

[@justanotherfakeid]

Many thanks! I was looking for something like this for experienced sysadmin types. This is a great jumping-off point for building out your own internal infrastructure with its own tweaks.

[@Mabux75]

Thank you for this excellent video !! Was looking last week for tutorials about custom Riot and Jitsi instances, but found nothing, so this now is exactly what I wanted :)))

[@hiteshsaini7184]

bro, element/riot is not using jitsi. it is using some other client. can you tell me what can be the reason.

[@schismaticschematics]

Fantastic. I'm no Linux sysadmin but found this easy to follow and still works now (though riot is now element, so there's a bit of difference in the details of those bits). As I'm totally new to matrix and all the associated platforms it took me about 5hrs to actually follow this 25 min speedrun.

[@wizdude]

The setup for synapse and riot is far easier that I recall from some time ago. This is exciting. I’m going to build up a riot server now to play around with :-)

[@hiteshsaini7184]

bro, element/riot is not using jitsi. it is using some other client. can you tell me what can be the reason.

[@ustoopia]

On Ubuntu 18.04 on a VPS I ran into an issue with ipv6, since it was disabled by default on the VPS so it could't start listening on the ipv6 localhost address. But once that was out of the way the install went flawless. I'm now a happy user on my home matrix synapse server. My next step will be to aquire some friends.

[@tanya1178]

Thanks for making it a breeze, appreciate the effort!

[@SheeceGardazi]

Thankyou so much for making this tutorial. Really appreciated it.

[@ernstmayer3868]

Good video but I would like to see a demo of hardening such a system to a reasonable secure state. Installing everything as root without firewall etc. does not help much.

[@climatechangedoesntbargain9140]

yeah, this would be helpful

[@theMarcantoine96]

Pretty easy, wow, more devs needs to provide videos like this. honestly in the past, by looking at the gitpage, synapse seemed to be clonky to install. Great work! Merci!

[@joeyconsensus6199]

Umm, nothing "easy" about it all all, Ones practically needs a masters degree in servers and bash script, where is the GUI Q & A system ?

[@erikprantare696]

@@joeyconsensus6199 You should have some knowledge of how webservers work before you do this. This is pretty much as simple as it gets.

[@jaco96]

He: "Look at how easy is to get this thing up and running these days :)" Me that didn't understood anything he did after opening the ssh: "Yeah!"

[@brawndo8726]

It's a series of steps

[@SheeceGardazi]

mate we are here to help you out if you end up in an issue post it here or on stackoverflow

[@marshalllyon8188]

@@SheeceGardazi If youre still willing to help, I'm a little lost on how he would set up the subdomains to forward to his machine. Mind helping out. I've never worked with subdomains and my knowledge on routing is superficial at best. Do they all point to the same IP? I can't seem to get them certified for HTTPS but I can get the main domain (no subdomains) certified.

[@SheeceGardazi]

@@marshalllyon8188 are you setting it up on your local pc or a machine in cloud like AWS? If local pc is it a wired connection? Do you have static ip address from ISP? Technically you don't need a subdomain! But in practice company/individual usual have just one static ip and they want to run multiple servers(each on one subdomain). So they create multiple subdomains. Its like static IP is a street name and there can be multiple houses on that street i.e. subdomains :)

[@marshalllyon8188]

@@SheeceGardazi Thanks for the response. Its a local machine on a home network. I have a few different physical servers running on it. All are wired. But I've never had to do anything more than a couple ports forwarded for each box as they all have different functions (Minecraft Server, NAS, etc). No I do not have a static IP.

[@choppacast]

Amazing work, guys

[@JamesT65]

Thanks Matt it got me running ...

Thanks Matt!!!! Perfect video

[@madwaxer83]

Thank you!! Just about to start over for my server with multiple domains hope it all ends well!!

[@benjaminb2297]

Great! quick and dirty, thank you very much! How about a quick video adding LDAP to it? Would be nice.

[@gabelanz9188]

A video like this, but moving a bit slower and explaining a bit more would be amazing.

[@joeyconsensus6199]

that is absolutely a mandatory pre-requisite indeed Windows software almost never ever requires users to concerns themselves with lines of code to edit, GUI setup needed here

[@vinesthemonkey]

@@joeyconsensus6199 if you run windows as an end user you should not be trying to setup server related stuff on your own

[@joeyconsensus6199]

@@vinesthemonkey Perhaps you should explain your reasoning behind that

[@vinesthemonkey]

@@joeyconsensus6199 says so right on their matrix self hosted guide. it's for people who have experience managing a server. otherwise you can use some hosted options other companies provide

[@joeyconsensus6199]

@@vinesthemonkey not the most technical IT reason, but yes i agree that there is an expectation that people who want to host their own server have to have that experience/knowledge base already

[@dameck9570]

Awesome video!

[@PhilipDudley3]

This video is great! It also assumes you've already got experience with LetsEncrypt and how to setup DNS names with registrar's.

[@panagiotisgeorgiadis1692]

Excellent video and tutorial. Everything is working now just fine. Could you perhaps make another one explaining how to connect Telegram, Messenger and Slack?

[@hasnain59]

thx mathew, it was very kind and informative, I was trying to setup demo server at my home but it got no success. Waiting for cloude server where i can experience ...

[@goethe528]

thank you!

[@SilentSolution]

That's great 👍

[@justwhyamerica]

is there an ansible deployment for this type of setup? I have not seen one and would love to start working one

[@tenor_felix]

Thank you so much for this. Are there any recommendments, how much computing power and how much memory a matrix server with or without jitsi option needs?

[@arisygdc5084]

Thanks. Can riot, config advance register with email and certain domain?

[@redd_cat]

How would I setup voice/video calls without needing more than 2 people in a room? You mentioned that Jitsi had this stipulation. I'm mainly just looking for secure DM calls.

[@ericespino7361]

I tought Jitsi Meet is the videoconference application and Jitsi is a desktop application for jabber and sip communication.

[@Gigabyteserviceofficial]

Thank you for making the video. how much server resource will be used? any rough estimation? eg if 3 people are doing video conferences how much bandwidth of server RAM etc needed, are there any suggestions that tell how much server resources will need for Jitsi if simultaneous X number of video conferences are running with x number of people.

[@jnr2349]

Interested in this question

[@Gigabyteserviceofficial]

@@jnr2349 I have made a rough estimation that for 10 users to do video call your server will use 18GB bandwidth

[@researchforumonline]

2g ram 30gb disk should be good enough for a small family server etc. I'm installing under a minimal disk as I'm going to make it a reusable VM image when done. My old matrix server is 4gb ram and 100gb disk 2 cores CPU.

[@researchforumonline]

Going to do this some time today. So the best os is Debian for matrix.

[@researchforumonline]

I can confirm i have installed matrix basically not for production use but will add Postgres etc and it will be ready. Took me a while but working good no errors with Debian 9.4 -64bit i hope soon the Postgres tutorial from Matthew is available. I have read and tried over 20 tutorials this is the only one that got the job done and not using docker or ansible-playbook which is a plus too. This video and the link to the tutorial should be matrix main tutorial because all the others have errors problems and this one works exactly as he Mathew says FYI i got an error on Debian 10 but no errors on Debian 9.4. As though matrix is the most easiest to install on Debian it should be the main OS for matrix for anyone reading who is trying to get a matrix/riot server setup. Make a new tutorial include the postgres bit and instead of riot it will be elemtent?

[@joeyconsensus6199]

@@researchforumonline I disagree that a particular linux 'disto' should be anymore compatible or more/less reliable for server software For example i use OpenSUSE Tumbleweed - this distro actually gets the latest kernel upgrades which is good for fundamentals such as BTRFS file systems If we are talking about compatibility or ease of setup of script files, i personally see that a GUI interface system is really another option which these days is more than viable considering most linux distro's have reasonable Desktop Environments This makes it much easier for newbies who dont have years of server/bash script experience on their hands and makes installation and editing of server configurations much easier

[@researchforumonline]

@@joeyconsensus6199 I got the job done with Debian 9.4 tried most others all had errors etc. Especially Ubuntu and Centos with many python errors that Debian never showed. Still not got turn setup yet need Matthew to do a tutorial on that too. Finding a good tutorial is hard and this one got the job done all other tutorials failed for me as I'm no pro I don't write code I just edit it and lack certain skills but I'm good at searching Google.

[@joeyconsensus6199]

@@researchforumonline I do understand your frustration, i would be pulling my hair out by now myself if i had gone through what you had I do know that Debian is meant to be the linux os disto for devs to choose for extremely technical things, i just hope that in the future, errors/glitches and stuff like that can be minimised enough to work on most linux os platforms OpenSuSE has an enterprise version for business'es, so that tells me that the devs of sever software should be able to make it compatible with such distros, and a GUI setup would be a lot easier as well in the furture Best of Fortune :)

[@tobiasbertram8751]

Great Video! Element just work great. Great! But I have a problem to call people in other networks. Do you have tipp to configure a stun/turn-server that works?

[@brettfarland2929]

Nice tutorial. Very helpful. Why I do not see any option for voicemails ? Not supported or am I missing something?

[@ALIRAZA-hz1db]

All the things working fine. But you forget to add turn server configuration. Can you make a simple video on it. i tried many ways to set it up but no one is working.

[@hiteshsaini7184]

bro, element/riot is not using jitsi. it is using some other client. can you tell me what can be the reason.

[@stpaquet]

For those using Ubuntu 20, there is a catch with certbot. Read github.com/certbot/certbot/issues/7951

[@hadibuxmahessar]

thank you for kind commen

[@Ludix147]

How hard is it to do maintenance? Like install updates, manage databases and so on.

[@justwhyamerica]

you should be setting up firewalls restrict access to SSH but since everything is done via certbot it should just need an apt update and dist-upgrade every now again.

[@LeszekT-IT]

Hi. Is there a version of this tutorial for Docker (compose) or Ansible?

[@nikitapukhov8388]

Hello! I did all for this instruction for my server over NAT Mikrotik. Https, messages, Riot-Web work good, but doesn't work calling & video on Jitsi. Do you have a instruction for installing TURN-server Coturn for Jitsi & Riot?

[@srmozaico1404]

Could you help me i have a issue with the video call and audio, if i call with two laptops conect to same wifi works but my server is in a (Datacenter) and when i trying from diferent network or from my phone is not working at all

[@DannyMeeks]

Is there a tutorial showing how to do this when using a separate nginx proxy server? Or what would I change within this tutorial to do so?

[@Robin_Just-Printing]

Hello. After i get running Riot at Minute 16:00 i dont have a Riot bot on my server and no idenity server. Do I have to do any configs? And my jitsi dont running too. Are there any german Communities of Chats for matrix?

[@ricardoacunarojas7679]

22:37 I configured the jitsi server, and is accesible, but when i configure it in the riot conf, the riot client doesn't use it. ( sorry for my poor english )

[@srmozaico1404]

yo hablo espanol te puedo ayudar

[@sndrb1336]

for me jitsi behind apache turned out a nightmare and I am now using the docker install of jitsi with an apache proxy to the docker http port.

[@wizdude]

This is where nginx shines. I’m a hardcore Apache guy, but when you want an easy proxy in front of some apps, nginx is the bomb. Certbot also supports it like a dream.

[@MikeTrieu]

"sudo su" and you don't have to login as root or sudo with every command. Fantastic demo, otherwise. Can't wait to set this up on my VPS!

[@matizArts]

[screams in opsec]

[@theeltea]

omfg...

[@GeekZillaBR]

Hey guys, I now it's asking a lot, but is there any way you can fast track the jitsi + matrix users authentication, I mean for now What I'm having to do is (And yes I need jitsi to be restricted to registered users). 1- Create a user/password on Synpase 2- Create a user on prosody That's quite a problem when u gotta a lotta users to create, password changes and so on. So, I Know you guys have a roadmap, but I think right now this is a must have feature , in those times when security is so important (and I'm trying to stay away from zoom and Synapse is the best solution so far, I just need it to authenticate users on Jitsi.

[@Naruu13]

Hello, Thank you for the video. Very helpful. Question: Is Jitsi End-to-End encrypted here from client to client?

[@noahwilliams2718]

No sadly, Jitsi is client to server encrypted

[@Naruu13]

@@noahwilliams2718 thank you

[@oleg_f]

Hello, How can I register admin user?

[@DarioAndreella]

I have no big knowledge thus I hope the question is not out of place. I would like to run Element and Jitsi on a server, I will be happy to try to follow the gide on matrix website. But I would also like to have an instance of NextCloud running alogside, on the same server. Is it something possible? In particular, being at home, static IP, good router (fritzbox 7390), how can I handle the fact that all 3 would end using common ports like 80 and 443? have Right now I have NextCloud and a Collabora running. Thanks a lot

[@avdhutjoshi676]

How do you set the link to your jitsi meet instance on android/iOS

[@eLBehmo]

For me this starts just a normal coturn based webrtc call. How can I start a jitsi call?

[@climatechangedoesntbargain9140]

Make a call with multiple people or add a widget.

[@raorobin0]

Hey thanks so much. Installed jitsi and server is working but whenever i video conferenc by jitsi. Cant hear other person voice or video and not even sceensharing working

[@young2k15]

If you are behind an NAT you will need to alter /etc/jitsi/videobridge/sip-communicator.properties. the instructions are found at jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart . I hope this helps

[@srmozaico1404]

I had the same issue

[@jaikishorsharan5971]

Thanks for the walktrough, how can I integrate the Riot desktop and mobile client into jitsi?

[@Matrixdotorg]

we’re working on that currently. for now it will default to jitsi.riot.im.

[@jaikishorsharan5971]

@@Matrixdotorg cool, thanks

[@Matrixdotorg]

@@jaikishorsharan5971 Desktop is coming shortly: github.com/matrix-org/matrix-react-sdk/pull/4348

[@rajilsaraswat9763]

Lack of support in the mobile client for self hosted Jitsi is a showstopper. Please can you point out where it is being developed?

[@climatechangedoesntbargain9140]

@@rajilsaraswat9763 which mobile client? Here you can find the place of development for every client: matrix.org/clients/

[@thorstenalbers139]

Thanks for the nice walk through. It is easy and clear to follow. Everything, Synapse, Riot(Element) and Jitsi are running as shown. The only thing i cant get over, is the first time (re)-login with an allready created user. I run in endlesss syncing... and cant use any client. Creating a new user and communication works. Does anyone know what to do or can share a link to a place showing a solution?

[@thorstenalbers139]

solved: public_baseurl setting in homeserver.yaml was wrong. needed to be matrix.domain.com

[@luisdaniellazotapia3601]

Hello, I am talking about Peru, excellent video and good explanation, When I register by email or phone I get this "Adding an email to your account is disabled on this server (Status 400) "How could it be arranged?

[@luisdaniellazotapia3601]

You can make a video explaining how to enable email and cell phone in the registry. please

[@elfomarcio]

Hi i'm trying to follow along but after installing synapse i get a 502 bad gateway error and now i'm stuck. I use ubuntu 20.04 on a linode, can anybody help?

[@researchforumonline]

Installed and setup but now paused while I figure out how to use postgres and change from sqlite to postgres. And then create an admin user. Doing this on Debian so confused about what commands to use. What's missing from this tutorial: (1. How to change/migrate sqlite dB to postgres db without breaking the server. 2. How to create an admin user for matrix as in a user on the system who you can call etc with admin rights. 3. How to setup a sever with riot on it and connect to a seperate server: the matrix server. 4. setup a firewall) That would be a complete full production tutorial. Obviously adding how to do other stuff would help too but that would be a minimal tutorial. The tutorial would have to be made by Matthew because: all the other tutorials in the past year I have tried all have mistakes and errors this is the only tutorial I have been successful with, Besides asking for guidence in the IRC matrix chats last time I setup a matrix server a few months ago. Thanks again, and to anyone reading there is nothing better than matrix unless you can code you own matrix style script, nothing comes close when you weigh up all the options and features that are open source.

[@misterlincoln]

Hello. When I turn on Wireguard, I can't call in the Element, it says "Connection is being established". But if you turn off the VPN it works fine. Why do you think this could be?

[@htemdad]

Is there any blog or wiki on this video walkthrough?

[@climatechangedoesntbargain9140]

Yes, see video description

[@sagarcv27]

Trying to renew the certs using certbot renew since the certs have expired. Cant access the jitsi.domain or any other subdomain. Can you help with the path and commands

[@gamingoutloud293]

Hi! I i tried to use coturn for my video / audio calls in matrix with element client. It failed if both participants are not in the same network. I figured out that i have to open many many ports for the relay server / coturn and gave up. Is this a possible alternative or i missed the point of your video?

[@ali.rakrami102]

That's cool , But I have a question. we want to run it locally without ssl & domain name , how could I do that? can you please let me know

[@absolutelynothing6324]

17:33 does it make any sense to run a server like this if you don't have a static IP?

[@tr_slimey6811]

You can use a service like no-ip I guess

[@paleriusvods9658]

If you go all the way to run your own synapse server you might also just set up a little tool that auto updates your domains DNS entry. Most domain hoster offer a python tool or some sort of unix script to create your own DynDNS setup

[@Ultrajamz]

Does federation mean people I don’t know will see my IP whenever using synapse/riot even if I self hold and only have the server for chat with friends?

[@Matrixdotorg]

Your server sees your IP; other servers don’t.

[@Ultrajamz]

Matrixdotorg up until I enter a room or communicate with a user thats hosted on another server I assume then that other server see’s the IP where my user is hosted (home for example) and where my client IP currently is (cell phone for example) - right?

[@Matrixdotorg]

The other server can see your server’s IP if you are interacting with users on the other server. The other server can never see your client’s IP address.

[@easybeatz1]

You could have more users if you would provide some usable documentation

[@twl148]

whats the memory usage on this? only got 512mb with ~100mb used for email and nginx

[@premkumarr2676]

For me On idle about 200mb memory .But during active usage ,it may vary based on number of people connected and using integrated apps(for me ~600mb). And it’s not recommended to run any service along email🤷🏼‍♂️.

[@WNYmathGuy]

Damn.

[@david_shiko]

Sorry for a possibly silly question, but can I do this on a local machine just for a test?

[@climatechangedoesntbargain9140]

Yes, but you should leave all federation rooms before shutting down

[@prathameshbijjargi94]

If 3 participants join it will stop working & cannot talk with using different network

[@Ellmaurermusic]

This sounds like you are having trouble with your jitsi-videobridge installation. Either look at jitsi's manual installation guide or try to check you got the configuration settings right as outlined in this issue: github.com/jitsi/jitsi-meet/issues/2254.

[@mercster]

The problem with this demo is that it includes a Riot web server, if people connecting to me are using a desktop client I don't need that stuff, right? I'm not interested in hosting a web page that allows others to log in... I was to only run synapse as a server and people use desktop/phone clients to connect to it.

[@mercster]

I guess what I'm asking is.. if I wanna run synapse on bare metal... no proxy... do I even need a web server (nginx/apache/etc)?

[@mercster]

Also I don't want to federate at all. How easy is it to rip the federation out of the homeserver.yaml?

[@mercster]

ALSO haha, you didn't include any postgresql setup :-) Sorry I know I'm coming at you with a lot, I just have questions. When I looked at homeserver.yaml on my machine, it was very lengthy and confusing (and this is coming from a UNIX/Linux admin going way back.) Your setup looked very easy. I eventually chose mattermost but, if you can address the questions I've given above, I might choose matrix/synapse after all. The Matrix.org chat servers aren't very busy and it is hard to get 1:1 help. Thanks.

[@bingeradeonline]

i have the problem that at 10:44 is 502 bad gateway can someone help

[@firejava9305]

Hast du den fehler beheben können? wenn ja, wie?

[@ricardoacunarojas7679]

21:41 Riot is not using the specified url !

[@ricardoacunarojas7679]

I configured the jitsi server, and is accesible, but when i configure it in the riot conf, the riot client doesn't use it. ( sorry for my poor english )

[@evrim73]

@Matrixdotorg: dw to delete a word, d$ to delete till the end.

[@danielkrajnik3817]

3:00 wait, you can do that?

[@awkwardvideo]

Nice tutorial but for some reason ate the .well-known configuration after doing a curl -L ton my domain i get thhis: 404 - No Such Resource No Such Resource Sorry. No luck finding that resource.

[@phoenixbyrd79]

What?

[@alstermediamoingmbh7486]

↗️ ↗️ ↗️

[@Cyberfoxxy]

i'm 3 hours into this tutorial. Video is at 9 minutes

[@hiteshsaini7184]

Connect with me here - lnkd.in/dQ-fzBmT

[@ambitiontecnologia5346]

Anyway, do I have a domain?

[@researchforumonline]

TREID TO INSTALL 15 TIMES JUNE 2024, 2 different servers 2 different domains, 3 years later no new tutorial no updates, you guys are just doing this for gov contracts and not really helping the community, Matthew needs to sort it as everyone else has not even bothered to make a tutorial. If you guys put a bit more effort into the tutorial like this one but a new one, much more business's might start noticing your system. Thanks I love matrix element so cool just extreme stress trying to setup, I am wondering 3 years later if I need to use debian 9.4 like I did 3 years ago to get it working, Dies.