diff --git a/opt/02-core/bigbluebutton/.gitignore b/opt/02-core/bigbluebutton/.gitignore
new file mode 100644
index 0000000..ef811d5
--- /dev/null
+++ b/opt/02-core/bigbluebutton/.gitignore
@@ -0,0 +1,26 @@
+docker-compose.yml
+docker-compose.override.yml
+
+# IDEA generated
+.idea
+
+# OS generated
+.DS_Store
+.AppleDouble
+
+# Tmp files
+*.swp
+*.log
+
+# App generated
+.env
+.env.bak
+postgres-data
+greenlight-data
+
+.cache/*/**
+!.cache/*/.gitkeep
+data/*
+!data/.gitkeep
+
+conf/bbb-html5.yml
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/.gitmodules b/opt/02-core/bigbluebutton/.gitmodules
new file mode 100644
index 0000000..5a8521f
--- /dev/null
+++ b/opt/02-core/bigbluebutton/.gitmodules
@@ -0,0 +1,27 @@
+[submodule "repos/bbb-etherpad-skin"]
+ path = repos/bbb-etherpad-skin
+ url = https://github.com/alangecker/bbb-etherpad-skin
+[submodule "repos/bbb-etherpad-plugin"]
+ path = repos/bbb-etherpad-plugin
+ url = https://github.com/alangecker/bbb-etherpad-plugin
+[submodule "repos/bbb-webhooks"]
+ path = repos/bbb-webhooks
+ url = https://github.com/bigbluebutton/bbb-webhooks
+[submodule "repos/bbb-playback"]
+ path = repos/bbb-playback
+ url = https://github.com/bigbluebutton/bbb-playback
+[submodule "repos/freeswitch"]
+ path = repos/freeswitch
+ url = https://github.com/signalwire/freeswitch.git
+[submodule "repos/bigbluebutton"]
+ path = repos/bigbluebutton
+ url = https://github.com/bigbluebutton/bigbluebutton.git
+[submodule "repos/bbb-webrtc-sfu"]
+ path = repos/bbb-webrtc-sfu
+ url = https://github.com/bigbluebutton/bbb-webrtc-sfu.git
+[submodule "repos/bbb-pads"]
+ path = repos/bbb-pads
+ url = https://github.com/bigbluebutton/bbb-pads.git
+[submodule "repos/bbb-webrtc-recorder"]
+ path = repos/bbb-webrtc-recorder
+ url = https://github.com/bigbluebutton/bbb-webrtc-recorder.git
diff --git a/opt/02-core/bigbluebutton/CHANGELOG.md b/opt/02-core/bigbluebutton/CHANGELOG.md
new file mode 100644
index 0000000..8dd1e7a
--- /dev/null
+++ b/opt/02-core/bigbluebutton/CHANGELOG.md
@@ -0,0 +1,140 @@
+# Changelog
+
+## Unreleased
+
+## Release v3.0.4 (2025-03-27)
+- update to 3.0.4 @tibroc [#347](https://github.com/bigbluebutton/docker/pull/347
+- fix not accepting length of dial in / voiceBridge numbers @alangecker
+- upgrade: migrate postgres & greenlight data @alangecker
+
+## Release v3.0.1 (2025-03-11)
+**Breaking change!** make sure to read the [upgrading notes](https://github.com/bigbluebutton/docker/blob/develop/docs/upgrading.md)
+
+- :tada: **BigBlueButton 3.0** [#313](https://github.com/bigbluebutton/docker/pull/313)
+
+
+## Release v2.7.3 (2023-12-08)
+
+**Breaking change!** make sure to read the [upgrading notes](https://github.com/bigbluebutton/docker/blob/develop/docs/upgrading.md)
+
+- BigBlueButton 2.7.3 @alangecker [#304](https://github.com/bigbluebutton/docker/pull/304)
+- use local sources instead of pulling inside container @alangecker [#307](https://github.com/bigbluebutton/docker/pull/307)
+- BigBlueButton 2.7.0 @alangecker [#291](https://github.com/bigbluebutton/docker/pull/291)
+- Update to ComposeV2 @leonidas-o [#271](https://github.com/bigbluebutton/docker/pull/271)
+- recordings: fix for missing `SHARED_SECRET` @ichdasich [#274](https://github.com/bigbluebutton/docker/issues/274) [#268](https://github.com/bigbluebutton/docker/issues/268)
+- Add RESOLVER_ADDRESS to env for docker-nginx-auto-ssl @pkolmann [#277](https://github.com/bigbluebutton/docker/pull/277)
+- Fix learning-dashboard @yanus [#262](https://github.com/bigbluebutton/docker/pull/262)
+
+## Release v2.6.0-2 (2023-04-04)
+- hotfix for broken freeswitch container due to enabled compresion with max file count == 1 [#260](https://github.com/bigbluebutton/docker/issues/260)
+
+## Release v2.6.0 (2023-04-03)
+- **Breaking change:** Greenlight v3 (see [upgrade note](docs/upgrading.md) @alangecker [#255](https://github.com/bigbluebutton/docker/pull/255)
+- BigBlueButton v2.6 @alangecker [#255](https://github.com/bigbluebutton/docker/pull/255)
+- Set client_max_body_size for greenlight @nr23730 [#252](https://github.com/bigbluebutton/docker/pull/252)
+- self building freeswitch (applying patches and independent from external apt repos) @alangecker
+- reduce amount of logs with senstivie data @alangecker
+
+## Release v2.5.8 (2022-11-06)
+- BBB 2.5.8 @alangecker [#238](https://github.com/bigbluebutton/docker/pull/238)
+- recordings: fix for missing ffmpeg filter @alangecker [#235](https://github.com/bigbluebutton/docker/issues/235) [#230](https://github.com/bigbluebutton/docker/pull/230)
+
+## Release v2.5.0 (2022-06-10)
+- BigBlueButton v2.5 @alangecker [#207](https://github.com/bigbluebutton/docker/pull/207)
+- central `tags.env` file with the tag names of most BBB components @alangecker
+- Usage of [official docker build images](https://gitlab.senfcall.de/senfcall-public/docker-bbb-build) for building @alangecker
+- publish docker images @alangecker [#174](https://github.com/bigbluebutton/docker/issues/174)
+- etherpad: enforce bbb-pads session handling @pedrobmarin [#211](https://github.com/bigbluebutton/docker/pull/211)
+- etherpad: avoid icons overlapping @pedrobmarin [#210](https://github.com/bigbluebutton/docker/pull/210)
+- fix recordings which include presentation polls @lightweight [#205](https://github.com/bigbluebutton/docker/pull/205)
+
+## Release v2.4.5 (2022-03-24)
+- Applied BBB v2.4.5 changes @alangecker
+- New mute & unmute sounds by senfcall
+- Update etherpad @pedrobmarin [#202](https://github.com/bigbluebutton/docker/pull/202)
+- Use own freeswitch mirror instead of the official login-only one @alangecker [#203](https://github.com/bigbluebutton/docker/issues/203)
+- Ignore docker-compose.override.yml @dorianim [#183](https://github.com/bigbluebutton/docker/pull/183)
+
+## Release v2.4.4 (2022-02-23)
+- Applied v2.4.4 changes @alangecker [#195](https://github.com/bigbluebutton/docker/pull/195)
+- Update Russian sound announcement examples @lexuzieel [#196](https://github.com/bigbluebutton/docker/pull/196)
+- fix for presentation slides not displayed if they contain type 3 fonts @rottaran [#191](https://github.com/bigbluebutton/docker/pull/191)
+
+## Release v2.4.0 (2021-12-29)
+- BigBlueButton v2.4 @alangecker [#159](https://github.com/bigbluebutton/docker/pull/159)
+- **Breaking change:** change nginx port from `8080` to `48087`. see [upgrade note](docs/upgrading.md) @alangeker [#133](https://github.com/bigbluebutton/docker/issues/133)
+- Enable optimization for Prometheus Exporter when recording is enabled @omidmaldar [#161](https://github.com/bigbluebutton/docker/pull/161)
+- Automatically remove old recordings after N days @omidmaldar [#162](https://github.com/bigbluebutton/docker/pull/162)
+
+
+## Release v2.3.14-1 (2021-10-06)
+- Applied changes v2.3.5-v2.3.14 @alangecker
+- updated wget to not use proxies [#143](https://github.com/bigbluebutton/docker/pull/143) @mghadam
+- fixed sed delimiter for CERTPATH and KEYPATH [#144](https://github.com/bigbluebutton/docker/pull/144) @mghadam
+- https_proxy: fix setting of ALLOWED_DOMAINS [#145](https://github.com/bigbluebutton/docker/pull/145) @clandmeter
+- coturn: expose ENABLE_HTTPS_PROXY env variable [#146](https://github.com/bigbluebutton/docker/pull/146) [#156](https://github.com/bigbluebutton/docker/pull/156) @clandmeter @omidmaldar
+
+## Release v2.3.4-1 (2021-06-22) #131
+- Applied v2.3.4 changes [#130](https://github.com/bigbluebutton/docker/pull/130) @alangecker
+- Reintegrate turn with default ports and support for external certificates [#126](https://github.com/bigbluebutton/docker/pull/126) @cjhille
+- Fix freeswitch package names for languages with uppercase characters in the path [#119](https://github.com/bigbluebutton/docker/pull/119) @lexuzieel
+- Exclude CLIENT_TITLE when generating compose file [#118](https://github.com/bigbluebutton/docker/pull/118) @bb
+- Fix for preuploaded presentations not working [#116](https://github.com/bigbluebutton/docker/pull/116) @manfred-w
+- Add POSTGRESQL_SECRET as environement variable [#111](https://github.com/bigbluebutton/docker/pull/111) @caminsha
+
+
+## Release v2.3.0
+- :tada: **BigBlueButton 2.3** including all its changes
+- Template based generation of docker-compose.yml [2.2.x#71](https://github.com/alangecker/bigbluebutton-docker/pull/71) [2.2.x#42](https://github.com/alangecker/bigbluebutton-docker/issues/42) @trickert76 @alangecker
+- Removal of `core` and all dependencies on the bigbluebutton ubuntu repository. Seperate container for `bbb-web`, `fsesl-akka` and `apps-akka` [2.2.x#26](https://github.com/alangecker/bigbluebutton-docker/issues/26) @alangecker
+- Fix recordings for Moodle BBB plugin: [2.2.x#110](https://github.com/alangecker/bigbluebutton-docker/pull/110) @danjesus
+- Fixed recordings container restart setting [2.2.x#109](https://github.com/alangecker/bigbluebutton-docker/pull/109) @manfred-w
+- Option for freeswitch language [2.2.x#85](https://github.com/alangecker/bigbluebutton-docker/pull/85) @alangecker @Daedalus3
+- Disabled integrated coturn [#73](https://github.com/bigbluebutton/docker/issues/73)
+
+## Release v2.2.31-1 (2020-12-23) #84
+- Applied v2.2.31 changes @alangecker
+- Fix when presentation after recording unable to delete and change access rights #82 #63 @cardinalit
+- Enable cameraQualityThresholds by default
+
+## Release v2.2.30-1 (2020-12-01) #79
+- Applied v2.2.30 changes @alangecker
+- Applied v2.2.29 changes @alangecker
+- Fix bug due to unnecessary port forward #81 @trickert76 @alangecker
+
+## Release v2.2.28-1 (2020-10-22) #67
+- Applied v2.2.28 changes @alangecker
+- Etherpad skin & plugin #69 @alangecker
+- Updated `development.md` docs (example config & note about issue #66) @alangecker
+- Allow setting the breakout room limit @alangecker
+
+## Release v2.2.27-2 (2020-10-16)
+- Increase proxy timeout to avoid aborting websocket connections @alangecker
+- Added a changelog
+
+## Release v2.2.27-1 (2020-10-14)
+- Applied BBB v2.2.27 changes https://github.com/bigbluebutton/bigbluebutton/releases/tag/v2.2.27 @alangecker
+- Upgrade docker base images (etherpad and bigbluebutton-exporter) @alangecker
+
+## Release v2.2.26-1 (2020-09-29)
+- Applied changes from BBB v2.2.24 to v2.2.26 #58 #60 @alangecker
+
+## Release v2.2.23-1 (2020-09-06)
+- :tada: Recording #16 by @artemtech and @alangecker
+- v2.2.23 changes by @alangecker
+- sip_profile extension field #54 by @yksflip
+- Remove greenlight container name #49 by @alangecker
+
+## Hotfix (2020-08-15)
+- Allow imagemagick to convert to pdf/svg #51 #52 @alangecker
+
+## Release v2.2.22-1 (2020-08-12) #50
+- v2.2.22 changes by @alangecker
+- Disable freeswitch logfiles inside containers
+
+## Release v2.2.21-1 (2020-7-18)
+- Changes for v2.2.21 #44 @alangecker
+- expose more BBB settings in .env file #34 @cjhille
+- IPv6 Support #32 @alangecker
+- Development Mode & Instructions #39 @alangecker
+- Prometheus Exporter Integration #40 @alangecker
diff --git a/opt/02-core/bigbluebutton/LICENSE b/opt/02-core/bigbluebutton/LICENSE
new file mode 100644
index 0000000..65c5ca8
--- /dev/null
+++ b/opt/02-core/bigbluebutton/LICENSE
@@ -0,0 +1,165 @@
+ GNU LESSER GENERAL PUBLIC LICENSE
+ Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc.
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+ This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+ 0. Additional Definitions.
+
+ As used herein, "this License" refers to version 3 of the GNU Lesser
+General Public License, and the "GNU GPL" refers to version 3 of the GNU
+General Public License.
+
+ "The Library" refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+ An "Application" is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+ A "Combined Work" is a work produced by combining or linking an
+Application with the Library. The particular version of the Library
+with which the Combined Work was made is also called the "Linked
+Version".
+
+ The "Minimal Corresponding Source" for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+ The "Corresponding Application Code" for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+ 1. Exception to Section 3 of the GNU GPL.
+
+ You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+ 2. Conveying Modified Versions.
+
+ If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+ a) under this License, provided that you make a good faith effort to
+ ensure that, in the event an Application does not supply the
+ function or data, the facility still operates, and performs
+ whatever part of its purpose remains meaningful, or
+
+ b) under the GNU GPL, with none of the additional permissions of
+ this License applicable to that copy.
+
+ 3. Object Code Incorporating Material from Library Header Files.
+
+ The object code form of an Application may incorporate material from
+a header file that is part of the Library. You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+ a) Give prominent notice with each copy of the object code that the
+ Library is used in it and that the Library and its use are
+ covered by this License.
+
+ b) Accompany the object code with a copy of the GNU GPL and this license
+ document.
+
+ 4. Combined Works.
+
+ You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+ a) Give prominent notice with each copy of the Combined Work that
+ the Library is used in it and that the Library and its use are
+ covered by this License.
+
+ b) Accompany the Combined Work with a copy of the GNU GPL and this license
+ document.
+
+ c) For a Combined Work that displays copyright notices during
+ execution, include the copyright notice for the Library among
+ these notices, as well as a reference directing the user to the
+ copies of the GNU GPL and this license document.
+
+ d) Do one of the following:
+
+ 0) Convey the Minimal Corresponding Source under the terms of this
+ License, and the Corresponding Application Code in a form
+ suitable for, and under terms that permit, the user to
+ recombine or relink the Application with a modified version of
+ the Linked Version to produce a modified Combined Work, in the
+ manner specified by section 6 of the GNU GPL for conveying
+ Corresponding Source.
+
+ 1) Use a suitable shared library mechanism for linking with the
+ Library. A suitable mechanism is one that (a) uses at run time
+ a copy of the Library already present on the user's computer
+ system, and (b) will operate properly with a modified version
+ of the Library that is interface-compatible with the Linked
+ Version.
+
+ e) Provide Installation Information, but only if you would otherwise
+ be required to provide such information under section 6 of the
+ GNU GPL, and only to the extent that such information is
+ necessary to install and execute a modified version of the
+ Combined Work produced by recombining or relinking the
+ Application with a modified version of the Linked Version. (If
+ you use option 4d0, the Installation Information must accompany
+ the Minimal Corresponding Source and Corresponding Application
+ Code. If you use option 4d1, you must provide the Installation
+ Information in the manner specified by section 6 of the GNU GPL
+ for conveying Corresponding Source.)
+
+ 5. Combined Libraries.
+
+ You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+ a) Accompany the combined library with a copy of the same work based
+ on the Library, uncombined with any other library facilities,
+ conveyed under the terms of this License.
+
+ b) Give prominent notice with the combined library that part of it
+ is a work based on the Library, and explaining where to find the
+ accompanying uncombined form of the same work.
+
+ 6. Revised Versions of the GNU Lesser General Public License.
+
+ The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+ Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License "or any later version"
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+ If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.
diff --git a/opt/02-core/bigbluebutton/README.md b/opt/02-core/bigbluebutton/README.md
new file mode 100644
index 0000000..1b658ae
--- /dev/null
+++ b/opt/02-core/bigbluebutton/README.md
@@ -0,0 +1,82 @@
+
+
+
+# 📦 BigBlueButton 3.0 Docker
+
+Version: 3.0.4 | [Changelog](CHANGELOG.md) | [Issues](https://github.com/bigbluebutton/docker/issues) | [Upgrading](docs/upgrading.md) | [Development](docs/development.md)
+
+## Features
+- Easy installation
+- Greenlight included
+- TURN server included
+- Fully automated HTTPS certificates
+- Full IPv6 support
+- Runs on any major linux distributon (Debian, Ubuntu, CentOS,...)
+
+## currently missing / broken
+- NAT support
+- bbb-transcription-controller
+- livekit
+
+## Requirements
+- 4GB of RAM
+- Linux (it will not work under Windows/WSL)
+- Root access (bbb-docker uses host networking, so it won't work with Kubernetes, any "CaaS"-Service, etc.)
+- Public IPv4 (expect issues with a firewall / NAT)
+- firewall allows internal networking (e.g. for ufw: `ufw allow 10.7.7.0/24`)
+- git installed
+
+## Install production server
+1. Ensure the requirements above are fulfilled (it really doesn't work without them)
+2. Install docker-ce & docker-compose-plugin
+ 1. follow instructions
+ * Debian: https://docs.docker.com/engine/install/debian/
+ * CentOS: https://docs.docker.com/engine/install/centos/
+ * Fedora: https://docs.docker.com/engine/install/fedora/
+ * Ubuntu: https://docs.docker.com/engine/install/ubuntu/
+ 2. Ensure docker works with `$ docker run hello-world`
+ 3. Ensure you use a docker version ≥ 23.0 : `$ docker --version`
+3. Clone this repository
+ ```sh
+ $ git clone https://github.com/bigbluebutton/docker.git bbb-docker
+ $ cd bbb-docker
+
+ # optional: use the more stable main branch (often much older)
+ $ git checkout main
+ ```
+4. Run setup:
+ ```bash
+ $ ./scripts/setup
+ ```
+5. (optional) Make additional configuration adjustments
+ ```bash
+ $ nano .env
+ # always recreate the docker-compose.yml file after making any changes
+ $ ./scripts/generate-compose
+ ```
+6. Start containers:
+ ```bash
+ $ docker compose up -d --no-build
+ ```
+7. If you use greenlight, you can create an admin account with:
+ ```bash
+ $ docker compose exec greenlight bundle exec rake admin:create
+ ```
+
+## Development setup
+1. Clone this repository
+ ```sh
+ $ git clone --recurse-submodules https://github.com/bigbluebutton/docker.git bbb-dev
+ ```
+2. Start dev server
+ ```sh
+ $ cd bbb-dev
+ $ ./scripts/dev
+ ```
+3. Use API Mate with the link presented in the console to create & join a conference
+
+
+## Further How-To's
+
+- [Integration into an existing web server](docs/existing-web-server.md)
+
diff --git a/opt/02-core/bigbluebutton/conf/.gitignore b/opt/02-core/bigbluebutton/conf/.gitignore
new file mode 100644
index 0000000..55a0124
--- /dev/null
+++ b/opt/02-core/bigbluebutton/conf/.gitignore
@@ -0,0 +1,4 @@
+*/*
+!.gitkeep
+!example.xml
+*.pdf
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/conf/sip_profiles/.gitkeep b/opt/02-core/bigbluebutton/conf/sip_profiles/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/opt/02-core/bigbluebutton/conf/sip_profiles/example.xml b/opt/02-core/bigbluebutton/conf/sip_profiles/example.xml
new file mode 100644
index 0000000..513d245
--- /dev/null
+++ b/opt/02-core/bigbluebutton/conf/sip_profiles/example.xml
@@ -0,0 +1,12 @@
+
+
+
diff --git a/opt/02-core/bigbluebutton/data/.gitkeep b/opt/02-core/bigbluebutton/data/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/opt/02-core/bigbluebutton/docker-compose.tmpl.yml b/opt/02-core/bigbluebutton/docker-compose.tmpl.yml
new file mode 100644
index 0000000..7f8acd1
--- /dev/null
+++ b/opt/02-core/bigbluebutton/docker-compose.tmpl.yml
@@ -0,0 +1,576 @@
+{{/* if you read this, you can ignore the following lines */}}
+# auto generated by ./scripts/generate-compose
+# don't edit this directly.
+{{/* -------- */}}
+
+{{ $ignore_tls_cert_errors := or (isTrue .Env.DEV_MODE) (isTrue .Env.IGNORE_TLS_CERT_ERRORS)}}
+
+services:
+ {{ if isTrue .Env.DEV_MODE }}
+ html5-dev:
+ build:
+ context: mod/html5-dev
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ user: ${BBB_DEV_UID}:${BBB_DEV_GID}
+ restart: unless-stopped
+ volumes:
+ - ./repos/bigbluebutton/bigbluebutton-html5:/app/:rw
+ - ./.cache/npm:/tmp/.npm:rw
+ network_mode: host
+ {{ end }}
+
+ bbb-web:
+ build:
+ context: mod/bbb-web
+ additional_contexts:
+ - src-web=./repos/bigbluebutton/bigbluebutton-web
+ - src-common-message=./repos/bigbluebutton/bbb-common-message
+ - src-common-web=./repos/bigbluebutton/bbb-common-web
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ image: alangecker/bbb-docker-web:{{ .Env.TAG_BBB }}
+ restart: unless-stopped
+ depends_on:
+ - redis
+ - etherpad
+ - bbb-pads
+ - collabora
+ healthcheck:
+ test: wget --no-proxy --no-verbose --tries=1 --spider http://10.7.7.2:8090/bigbluebutton/api || exit 1
+ start_period: 2m
+ environment:
+ IGNORE_TLS_CERT_ERRORS: {{ $ignore_tls_cert_errors }}
+ DOMAIN: ${DOMAIN}
+ ENABLE_RECORDING: ${ENABLE_RECORDING:-false}
+ SHARED_SECRET: ${SHARED_SECRET}
+ WELCOME_MESSAGE: ${WELCOME_MESSAGE:-}
+ WELCOME_FOOTER: ${WELCOME_FOOTER}
+ STUN_SERVER: stun:${STUN_IP}:${STUN_PORT}
+ ENABLE_HTTPS_PROXY: ${ENABLE_HTTPS_PROXY:-false}
+ TURN_SECRET: ${TURN_SECRET:-}
+ TURN_EXT_SERVER: ${TURN_EXT_SERVER:-}
+ TURN_EXT_SECRET: ${TURN_EXT_SECRET:-}
+ ENABLE_LEARNING_DASHBOARD: ${ENABLE_LEARNING_DASHBOARD:-true}
+ volumes:
+ - ./data/bigbluebutton:/var/bigbluebutton
+ - ./data/freeswitch-meetings:/var/freeswitch/meetings
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.2
+
+
+ freeswitch:
+ container_name: bbb-freeswitch
+ build:
+ context: mod/freeswitch
+ additional_contexts:
+ - freeswitch=./repos/freeswitch/
+ - build-files=./repos/bigbluebutton/build/packages-template/bbb-freeswitch-core/
+ - fs-config=./repos/bigbluebutton/bbb-voice-conference/config/freeswitch/conf/
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ image: alangecker/bbb-docker-freeswitch:{{ .Env.TAG_FREESWITCH }}-{{ .Env.TAG_BBB }}
+ restart: unless-stopped
+ cap_add:
+ - IPC_LOCK
+ - NET_ADMIN
+ - NET_RAW
+ - NET_BROADCAST
+ - SYS_NICE
+ - SYS_RESOURCE
+ environment:
+ DOMAIN: ${DOMAIN}
+ EXTERNAL_IPv4: ${EXTERNAL_IPv4}
+ EXTERNAL_IPv6: ${EXTERNAL_IPv6:-::1}
+ SIP_IP_ALLOWLIST: ${SIP_IP_ALLOWLIST:-}
+ DISABLE_SOUND_MUTED: ${DISABLE_SOUND_MUTED:-false}
+ DISABLE_SOUND_ALONE: ${DISABLE_SOUND_ALONE:-false}
+ SOUNDS_LANGUAGE: ${SOUNDS_LANGUAGE:-en-us-callie}
+ ESL_PASSWORD: ${FSESL_PASSWORD:-ClueCon}
+ {{ if .Env.SIP_IP_ALLOWLIST }}
+ ports:
+ - 5060:5060/udp
+ {{ end }}
+ volumes:
+ - ./conf/sip_profiles:/etc/freeswitch/sip_profiles/external-dialin
+ - ./data/freeswitch-meetings:/var/freeswitch/meetings
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.10
+ logging:
+ # reduce logs to a minimum, so `docker compose logs -f` still works
+ driver: "local"
+ options:
+ max-size: "10k"
+ max-file: "1"
+ compress: "false"
+
+ nginx:
+ build:
+ context: mod/nginx
+ additional_contexts:
+ - src-learning-dashboard=./repos/bigbluebutton/bbb-learning-dashboard
+ - src-playback=./repos/bbb-playback
+ - src-html5=./repos/bigbluebutton/bigbluebutton-html5
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ TAG_BBB: {{ .Env.TAG_BBB }}
+ image: alangecker/bbb-docker-nginx:{{ .Env.TAG_BBB }}-{{ .Env.TAG_PLAYBACK }}-1.25
+ restart: unless-stopped
+ volumes:
+ - ./data/bigbluebutton:/var/bigbluebutton
+ - ${DEFAULT_PRESENTATION:-/dev/null}:/www/default.pdf
+
+ {{ if isTrue .Env.DEV_MODE }}
+ # overwrite html5 config
+ - ./mod/nginx/bbb-html5.dev.nginx:/etc/nginx/bbb/bbb-html5.nginx:ro
+ {{ end }}
+ tmpfs:
+ - /tmp
+ network_mode: host
+ extra_hosts:
+ - "host.docker.internal:10.7.7.1"
+ - "bbb-web:10.7.7.2"
+ - "etherpad:10.7.7.4"
+ - "webrtc-sfu:10.7.7.1"
+ - "greenlight:10.7.7.21"
+ - "bbb-graphql-server:10.7.7.31"
+ - "bbb-graphql-middleware:10.7.7.32"
+
+ etherpad:
+ build:
+ context: mod/etherpad
+ additional_contexts:
+ - plugin=./repos/bbb-etherpad-plugin
+ - skin=./repos/bbb-etherpad-skin
+ args:
+ TAG_ETHERPAD: "2.2.7"
+ image: alangecker/bbb-docker-etherpad:2.2.7-s{{ .Env.COMMIT_ETHERPAD_SKIN }}-p{{ .Env.COMMIT_ETHERPAD_PLUGIN }}
+ restart: unless-stopped
+ depends_on:
+ - redis
+ - collabora
+ environment:
+ ETHERPAD_API_KEY: ${ETHERPAD_API_KEY}
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.4
+
+ bbb-pads:
+ build:
+ context: mod/bbb-pads
+ additional_contexts:
+ - src=./repos/bbb-pads
+ image: alangecker/bbb-docker-pads:{{ .Env.TAG_PADS }}
+ restart: unless-stopped
+ depends_on:
+ - redis
+ - etherpad
+ environment:
+ ETHERPAD_API_KEY: ${ETHERPAD_API_KEY}
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.18
+
+ bbb-export-annotations:
+ build:
+ context: mod/bbb-export-annotations
+ additional_contexts:
+ src: ./repos/bigbluebutton/bbb-export-annotations
+ image: alangecker/bbb-docker-bbb-export-annotations:{{ .Env.TAG_BBB }}
+ restart: unless-stopped
+ depends_on:
+ - redis
+ - etherpad
+ - bbb-pads
+ networks:
+ # need connections to:
+ # https://github.com/bigbluebutton/bigbluebutton/blob/v2.7.0/bbb-export-annotations/config/settings.json
+ # "bbbWebAPI": "http://127.0.0.1:8090", -> bbb-web
+ # "bbbPadsAPI": "http://127.0.0.1:9002", -> bbb-pads
+ bbb-net:
+ ipv4_address: 10.7.7.19
+ volumes:
+ - ./data/bigbluebutton:/var/bigbluebutton
+ tmpfs:
+ - /tmp
+
+ redis:
+ image: redis:7.2-alpine
+ restart: unless-stopped
+ healthcheck:
+ test: ["CMD", "redis-cli", "ping"]
+ interval: 1s
+ timeout: 3s
+ retries: 30
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.5
+
+ webrtc-sfu:
+ build:
+ context: mod/webrtc-sfu
+ additional_contexts:
+ - source=./repos/bbb-webrtc-sfu
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ image: alangecker/bbb-docker-webrtc-sfu:{{ .Env.TAG_WEBRTC_SFU }}
+ restart: unless-stopped
+ depends_on:
+ - redis
+ - freeswitch
+ environment:
+ ESL_PASSWORD: ${FSESL_PASSWORD:-ClueCon}
+ {{ if .Env.EXTERNAL_IPv6 }}
+ MS_WEBRTC_LISTEN_IPS: '[{"ip":"::", "announcedIp":"${EXTERNAL_IPv6}"}, {"ip":"${EXTERNAL_IPv4}", "announcedIp":"${EXTERNAL_IPv4}"}]'
+ {{else}}
+ MS_WEBRTC_LISTEN_IPS: '[{"ip":"${EXTERNAL_IPv4}", "announcedIp":"${EXTERNAL_IPv4}"}]'
+ {{end}}
+ volumes:
+ - ./data/mediasoup:/var/mediasoup
+ tmpfs:
+ - /var/log/bbb-webrtc-sfu
+ network_mode: host
+ security_opt:
+ - seccomp:unconfined # allow io_uring access for mediasoup
+ ulimits:
+ memlock: -1 # allow io_uring_register_buffers to allocate enough ram
+
+ fsesl-akka:
+ build:
+ context: mod/fsesl-akka
+ additional_contexts:
+ - src-common-message=./repos/bigbluebutton/bbb-common-message
+ - src-fsesl-client=./repos/bigbluebutton/bbb-fsesl-client
+ - src-fsesl-akka=./repos/bigbluebutton/akka-bbb-fsesl
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ image: alangecker/bbb-docker-fsesl-akka:{{ .Env.TAG_BBB }}
+ restart: unless-stopped
+ depends_on:
+ - redis
+ - freeswitch
+ environment:
+ FSESL_PASSWORD: ${FSESL_PASSWORD:-ClueCon}
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.14
+
+ apps-akka:
+ build:
+ context: mod/apps-akka
+ additional_contexts:
+ - src-common-message=./repos/bigbluebutton/bbb-common-message
+ - src-apps-akka=./repos/bigbluebutton/akka-bbb-apps
+ - src-config=./repos/bigbluebutton/bigbluebutton-html5/private/config/
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ TAG_BBB: {{ .Env.TAG_BBB }}
+ image: alangecker/bbb-docker-apps-akka:{{ .Env.TAG_BBB }}
+ restart: unless-stopped
+ depends_on:
+ - redis
+ - postgres
+ environment:
+ DOMAIN: ${DOMAIN}
+ SHARED_SECRET: ${SHARED_SECRET}
+ POSTGRES_PASSWORD: ${POSTGRESQL_SECRET:-password}
+ volumes:
+ - ./data/freeswitch-meetings:/var/freeswitch/meetings
+ - ./conf/bbb-html5.yml:/etc/bigbluebutton/bbb-html5.yml:ro
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.15
+
+ bbb-graphql-server:
+ build:
+ context: mod/bbb-graphql-server
+ additional_contexts:
+ - src=./repos/bigbluebutton/bbb-graphql-server
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ GRAPHQL_ENGINE_TAG: v2.45.0
+ image: alangecker/bbb-docker-graphql-server:{{ .Env.TAG_BBB }}
+ depends_on:
+ - postgres
+ - bbb-web
+ - apps-akka
+ - bbb-graphql-actions
+ restart: unless-stopped
+ environment:
+ POSTGRES_USER: postgres
+ POSTGRES_PASSWORD: ${POSTGRESQL_SECRET:-password}
+ HASURA_GRAPHQL_ADMIN_SECRET: TODO_CHANGE_ME
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.31
+
+
+ bbb-graphql-actions:
+ build:
+ context: mod/bbb-graphql-actions
+ {{ if isTrue .Env.DEV_MODE }}
+ dockerfile: Dockerfile.dev
+ {{ else }}
+ additional_contexts:
+ - src=./repos/bigbluebutton/bbb-graphql-actions
+ {{ end }}
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ image: alangecker/bbb-docker-graphql-actions:{{ .Env.TAG_BBB }}
+ restart: unless-stopped
+ depends_on:
+ - redis
+ - apps-akka
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.30
+ {{ if isTrue .Env.DEV_MODE }}
+ volumes:
+ - ./repos/bigbluebutton/bbb-graphql-actions:/app/:rw
+ - ./.cache/npm:/tmp/.npm:rw
+ {{ end }}
+
+ bbb-graphql-middleware:
+ build:
+ context: mod/bbb-graphql-middleware
+ {{ if isTrue .Env.DEV_MODE }}
+ dockerfile: Dockerfile.dev
+ {{ else }}
+ additional_contexts:
+ - src=./repos/bigbluebutton/bbb-graphql-middleware
+ {{ end }}
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ image: alangecker/bbb-docker-graphql-middleware:{{ .Env.TAG_BBB }}
+ restart: unless-stopped
+ depends_on:
+ - bbb-graphql-server
+ - bbb-graphql-actions
+ - bbb-web
+ - redis
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.32
+ extra_hosts:
+ - "nginx:10.7.7.1"
+
+ {{ if isTrue .Env.DEV_MODE }}
+ user: ${BBB_DEV_UID}:${BBB_DEV_GID}
+ volumes:
+ - ./repos/bigbluebutton/bbb-graphql-middleware:/app/:ro
+ - ./repos/bigbluebutton/bbb-graphql-middleware/config/config.yml:/usr/share/bbb-graphql-middleware/config.yml:ro
+ - ./mod/bbb-graphql-middleware/config.yml:/etc/bigbluebutton/bbb-graphql-middleware.yml:ro
+ - ./.cache/go:/gopath:rw
+ - ./.cache/go-build:/.cache/go-build:rw
+ {{ end }}
+
+ collabora:
+ image: collabora/code:latest
+ restart: unless-stopped
+ tmpfs:
+ - /tmp
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.20
+ # disable logging (way to verbose)
+ logging:
+ driver: none
+
+
+ periodic:
+ build: mod/periodic
+ image: alangecker/bbb-docker-periodic:v3.0.0
+ restart: unless-stopped
+
+ volumes:
+ - /var/run/docker.sock:/var/run/docker.sock
+ - ./data/bigbluebutton:/var/bigbluebutton
+ - ./data/mediasoup:/var/mediasoup
+ tmpfs:
+ - /var/log/bigbluebutton
+ environment:
+ ENABLE_RECORDING: ${ENABLE_RECORDING}
+ REMOVE_OLD_RECORDING: ${REMOVE_OLD_RECORDING}
+ RECORDING_MAX_AGE_DAYS: ${RECORDING_MAX_AGE_DAYS}
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.12
+
+{{ if isTrue .Env.ENABLE_RECORDING }}
+ # recordings
+ recordings:
+ build:
+ context: mod/recordings
+ additional_contexts:
+ - record-core=./repos/bigbluebutton/record-and-playback/core
+ - presentation=./repos/bigbluebutton/record-and-playback/presentation
+ - bbb-conf=./repos/bigbluebutton/bigbluebutton-config
+ args:
+ BBB_BUILD_TAG: {{ .Env.BBB_BUILD_TAG }}
+ TAG_BBB_PRESENTATION_VIDEO: "5.0.0-beta.2"
+ image: alangecker/bbb-docker-recordings:{{ .Env.TAG_BBB }}
+ restart: unless-stopped
+ depends_on:
+ - redis
+ - bbb-pads
+ environment:
+ DOMAIN: ${DOMAIN}
+ SHARED_SECRET: ${SHARED_SECRET}
+ volumes:
+ - ./data/bigbluebutton:/var/bigbluebutton
+ - ./data/freeswitch-meetings:/var/freeswitch/meetings
+ - ./data/mediasoup:/var/mediasoup
+ - ./data/bbb-webrtc-recorder:/var/lib/bbb-webrtc-recorder
+ tmpfs:
+ - /var/log/bigbluebutton
+ - /tmp
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.16
+
+ bbb-webrtc-recorder:
+ build:
+ context: mod/bbb-webrtc-recorder
+ additional_contexts:
+ - src=./repos/bbb-webrtc-recorder
+ image: alangecker/bbb-docker-webrtc-recorder:{{ .Env.TAG_WEBRTC_RECORDER }}
+ depends_on:
+ - redis
+ volumes:
+ - ./data/bbb-webrtc-recorder:/var/lib/bbb-webrtc-recorder
+ # WebRTC connection to bbb-webrtc-sfu seem to
+ # only to work via the external IP
+ network_mode: host
+ extra_hosts:
+ - "redis:10.7.7.5"
+{{end}}
+
+{{ if isTrue .Env.ENABLE_WEBHOOKS }}
+ # webhooks
+ webhooks:
+ build:
+ context: mod/webhooks
+ additional_contexts:
+ - src=./repos/bbb-webhooks
+ image: alangecker/bbb-docker-webhooks:{{ .Env.TAG_WEBHOOKS }}
+ restart: unless-stopped
+ environment:
+ DOMAIN: ${DOMAIN}
+ SHARED_SECRET: ${SHARED_SECRET}
+ depends_on:
+ - redis
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.17
+{{end}}
+
+{{ if isTrue .Env.ENABLE_HTTPS_PROXY }}
+
+ haproxy:
+ build: mod/haproxy
+ image: alangecker/bbb-haproxy:2.8.10
+ volumes:
+ - ./data/haproxy/letsencrypt:/etc/letsencrypt
+ - ./mod/haproxy/haproxy.cfg:/etc/haproxy/haproxy.cfg
+ - ./mod/haproxy/protocolmap:/etc/haproxy/protocolmap
+ environment:
+ - IGNORE_TLS_CERT_ERRORS={{$ignore_tls_cert_errors}}
+ - CERT1=${DOMAIN}
+ - EMAIL=${LETSENCRYPT_EMAIL}
+ network_mode: host
+{{end}}
+
+ # coturn
+ coturn:
+ image: coturn/coturn:4.6-alpine
+ restart: unless-stopped
+ command:
+ - "--external-ip=${EXTERNAL_IPv4}/${EXTERNAL_IPv4}"
+ - "--external-ip=${EXTERNAL_IPv6:-::1}/${EXTERNAL_IPv6:-::1}"
+ - "--static-auth-secret=${TURN_SECRET}"
+ - "--allowed-peer-ip=${EXTERNAL_IPv4}"
+ - "--relay-ip=${EXTERNAL_IPv4}"
+ - "--relay-ip=${EXTERNAL_IPv6:-::1}"
+ volumes:
+ - ./mod/coturn/turnserver.conf:/etc/coturn/turnserver.conf
+ network_mode: host
+
+
+{{ if isTrue .Env.ENABLE_GREENLIGHT }}
+ # greenlight
+ greenlight:
+ image: bigbluebutton/greenlight:v3.5.0
+ restart: unless-stopped
+ env_file: .env
+ depends_on:
+ - postgres
+ - redis
+
+ environment:
+ DATABASE_URL: postgres://postgres:${POSTGRESQL_SECRET:-password}@postgres:5432/greenlight
+ REDIS_URL: redis://redis:6379
+ {{ if $ignore_tls_cert_errors }}
+ BIGBLUEBUTTON_ENDPOINT: http://10.7.7.1:48083/bigbluebutton/api
+ {{else}}
+ BIGBLUEBUTTON_ENDPOINT: https://${DOMAIN}/bigbluebutton/api
+ {{end}}
+ BIGBLUEBUTTON_SECRET: ${SHARED_SECRET}
+ SECRET_KEY_BASE: ${RAILS_SECRET}
+ RELATIVE_URL_ROOT: /
+ volumes:
+ - ./data/greenlight:/usr/src/app/storage
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.21
+{{end}}
+
+ postgres:
+ image: postgres:16-alpine
+ restart: unless-stopped
+ environment:
+ POSTGRES_MULTIPLE_DATABASES: bbb_graphql,hasura_app,greenlight
+ POSTGRES_USER: postgres
+ POSTGRES_PASSWORD: ${POSTGRESQL_SECRET:-password}
+ healthcheck:
+ test: ["CMD-SHELL", "pg_isready -U postgres"]
+ interval: 10s
+ timeout: 5s
+ retries: 5
+ volumes:
+ - ./data/postgres:/var/lib/postgresql/data
+ - ./mod/postgres/initdb.sh:/docker-entrypoint-initdb.d/initdb.sh
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.22
+
+{{ if isTrue .Env.ENABLE_PROMETHEUS_EXPORTER }}
+ # prometheus
+ prometheus-exporter:
+ image: greenstatic/bigbluebutton-exporter:latest
+ restart: unless-stopped
+ environment:
+ API_BASE_URL: http://10.7.7.1:48087/bigbluebutton/api/
+ API_SECRET: ${SHARED_SECRET}
+ RECORDINGS_METRICS_READ_FROM_DISK: "${ENABLE_PROMETHEUS_EXPORTER_OPTIMIZATION:-false}"
+ networks:
+ bbb-net:
+ ipv4_address: 10.7.7.33
+ {{ if isTrue .Env.ENABLE_PROMETHEUS_EXPORTER_OPTIMIZATION }}
+ volumes:
+ - ./data/bigbluebutton:/var/bigbluebutton:ro
+ {{end}}
+
+ # the exporter requires /etc/bigbluebutton/bigbluebutton-release
+ tmpfs:
+ - /etc/bigbluebutton:mode=777
+ entrypoint: sh -c 'echo "BIGBLUEBUTTON_RELEASE=2.7.3" > /etc/bigbluebutton/bigbluebutton-release && python server.py'
+{{end}}
+
+networks:
+ bbb-net:
+ ipam:
+ driver: default
+ config:
+ - subnet: "10.7.7.0/24"
diff --git a/opt/02-core/bigbluebutton/docs/behind-nat.md b/opt/02-core/bigbluebutton/docs/behind-nat.md
new file mode 100644
index 0000000..3a8d1e6
--- /dev/null
+++ b/opt/02-core/bigbluebutton/docs/behind-nat.md
@@ -0,0 +1,14 @@
+# Note if you use a Firewall / NAT
+Kurento binds somehow always to the external IP instead of the local one or `0.0.0.0`. For that reason you need to add your external IP to your interface.
+
+#### Temporary way (until next reboot)
+```
+$ ip addr add 144.76.97.34/32 dev ens3
+```
+
+#### Permanent way
+Specific to your linux distribution. Use a search engine of your choice. ;)
+
+## Ports
+Also don't forget to forward all necassary ports listed in https://docs.bigbluebutton.org/admin/configure-firewall.html
+
diff --git a/opt/02-core/bigbluebutton/docs/development.md b/opt/02-core/bigbluebutton/docs/development.md
new file mode 100644
index 0000000..e782a97
--- /dev/null
+++ b/opt/02-core/bigbluebutton/docs/development.md
@@ -0,0 +1,50 @@
+# bbb-docker Development
+
+## Basics
+normally people start BBB with the pre-built docker images, but for developing you need to build them by yourself. For that you need to ensure that the submodules are also checked out
+
+```sh
+$ git clone --recurse-submodules https://github.com/bigbluebutton/docker.git bbb-dev
+$ cd bbb-dev
+```
+
+## Running
+you can now run bbb-docker locally by simply starting
+
+```sh
+$ ./scripts/dev
+```
+
+Use the API Mate with the link presented in the console to create & join a conference.
+
+### Hints
+- the html5 component will watch and automatically reload on any changes 🚀
+- if you change anything in the other components, you need to
+ * manually rebuilt it \
+ `$ docker compose build CONTAINERNAME`
+ * restart it \
+ `$ docker compose up -d CONTAINERNAME`
+- if you change any variable in .env, always run following to rebuild the `docker-compose.yml``
+ `$ ./scripts/generate-compose`
+- view the logs with \
+ `$ docker compose logs -f`
+- At some point your browser will warn you about an invalid certificate, but you can press _"Accept the Risk and Continue" / "Proceed to 10.7.7.1 (unsafe)"_
+
+## Notes
+- Due to the self signed ssl certificate it is currently not possible to notify greenlight about recordings in dev mode
+
+## How to do create a new update for a newer BBB release?
+This always consists out of following steps
+1. **Get an understanding about changes that happened and find out what changes to bbb-docker that require.** \
+ * main source for that are the release notes in https://github.com/bigbluebutton/bigbluebutton/releases
+2. **Apply these changes to this project.**
+ * Often you only need to checkout the git submodules to the specific release tag
+ * List of all submodules: `git submodule`
+3. Test everything (with firefox **and** chromium/chrome)
+ * Audio
+ * Video
+ * Presentation upload
+ * Shared Notes
+4. Create a `CHANGELOG.md` entry
+5. Create a Pull Request
+6. Receive big thanks from @alangecker
diff --git a/opt/02-core/bigbluebutton/docs/existing-web-server.md b/opt/02-core/bigbluebutton/docs/existing-web-server.md
new file mode 100644
index 0000000..adf2ff8
--- /dev/null
+++ b/opt/02-core/bigbluebutton/docs/existing-web-server.md
@@ -0,0 +1,82 @@
+# How to integrate into an existing Web server setup
+
+Since the non-dockerized version of BigBlueButton has [many requirements](https://docs.bigbluebutton.org/2.2/install.html#minimum-server-requirements), such as a specific Ubuntu version (16.04) as well as ports 80/443 not being in use by other applications, and considering that [a "clean" server dedicated for BigBlueButton is recommended](https://docs.bigbluebutton.org/2.2/install.html#before-you-install), you may enjoy the benefits of this dockerized version in order to run BigBlueButton on a server that is not completely dedicated to this software, on which a Web server may be already in use.
+
+You could dedicate a virtual host to BigBlueButton, allowing external access to it through a reverse proxy.
+
+> **Note.** The automatic HTTPS Proxy is not needed if you are going to run BigBlueButton behind a reverse proxy; in that case, you should be able to enable SSL for the virtual host you are going to dedicate to BigBlueButton, using your Web server features. Please notice that it will not be possible to install and use the integrated TURN server, since it requires the automatic HTTPS Proxy to be installed; therefore, if a TURN server is required, you should install and configure it by yourself. You can set BigBlueButton to use a TURN server by uncommenting and adjusting `TURN_SERVER` and `TURN_SECRET` in the `.env` file, which is created after completion of the setup script.
+
+## Installation
+1. Install BigBlueButton Docker [as explained above](#install). While running the setup script, please choose `n` when you're asked the following question: `Should an automatic HTTPS Proxy be included? (y/n)`.
+2. Now all the required Docker containers should be running. BigBlueButton listens to port 48087. Create a virtual host by which BigBlueButton will be publicly accessible (in this case, let's assume the following server name for the virtual host: `bbb.example.com`). Enable SSL for the new _https_ virtual host. Make sure that the SSL certificate you will be using is signed by a CA (Certificate Authority). You could generate an SSL certificate for free using Let's Encrypt. It is suggested to add some directives to the _http_ virtual host `bbb.example.com` to redirect all requests to the _https_ one.
+
+At this point, choose one of the following sections according to which Web server you're running ([Apache](#integration-with-apache)).
+
+Eventually, BigBlueButton should be publicly accessible on `https://bbb.example.com/`. If you chose to install Greenlight, then the previous URL should allow you to open its home page. The APIs will be accessible through `https://bbb.example.com/bigbluebutton/`.
+
+## Integration with nginx
+1. Add the following directives to the _https_ virtual host `bbb.example.com`
+```
+map $http_upgrade $connection_upgrade {
+ default upgrade;
+ '' close;
+}
+map $remote_addr $endpoint_addr {
+ "~:" [::1];
+ default 127.0.0.1;
+}
+
+server {
+ listen 443 ssl http2 default_server;
+ listen [::]:443 ssl http2 default_server;
+ server_name bbb.example.com;
+
+ ssl_certificate /etc/letsencrypt/live/bbb.example.com/fullchain.pem;
+ ssl_certificate_key /etc/letsencrypt/live/bbb.example.com/privkey.pem;
+
+ access_log /var/log/nginx/bigbluebutton.access.log;
+ error_log /var/log/nginx/bigbluebutton.error.log;
+
+ location / {
+ proxy_http_version 1.1;
+ proxy_pass http://$endpoint_addr:48087;
+ proxy_set_header Host $host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_set_header X-Forwarded-Proto $scheme;
+ proxy_set_header Upgrade $http_upgrade;
+ proxy_set_header Connection $connection_upgrade;
+ proxy_cache_bypass $http_upgrade;
+ }
+}
+
+```
+2. Restart nginx
+```
+service nginx restart
+```
+
+## Integration with Apache
+1. Make sure that the following Apache modules are in use: `proxy`, `rewrite`, `proxy_http`, `proxy_wstunnel`. On _apache2_, the following command activates these modules, whenever they are not already enabled:
+```
+sudo a2enmod proxy rewrite proxy_http proxy_wstunnel
+```
+2. Add the following directives to the _https_ virtual host `bbb.example.com`:
+```
+ProxyPreserveHost On
+
+RewriteEngine On
+RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC,OR]
+RewriteCond %{HTTP:CONNECTION} ^Upgrade$ [NC]
+RewriteRule .* ws://127.0.0.1:48087%{REQUEST_URI} [P,QSA,L]
+
+
+ Require all granted
+ ProxyPass http://127.0.0.1:48087/
+ ProxyPassReverse http://127.0.0.1:48087/
+
+```
+3. Restart Apache:
+```
+service apache2 restart
+```
diff --git a/opt/02-core/bigbluebutton/docs/network-config.md b/opt/02-core/bigbluebutton/docs/network-config.md
new file mode 100644
index 0000000..3289183
--- /dev/null
+++ b/opt/02-core/bigbluebutton/docs/network-config.md
@@ -0,0 +1,36 @@
+
+## Network Configuration
+Services as configured.
+|Service | Network | IP address | Other Option |
+--- | --- | --- | ---
+| bbb-web | bbb-net | 10.7.7.2 |
+| bbb-pads | bbb-net | 10.7.7.18 |
+| html5-backend-{{$i}} | bbb-net | 10.7.7.{{add 100 $i}}| Port {{ add 4000 $i }}
+| html5-frontend-{{$i}}| bbb-net | 10.7.7.{{add 200 $i}}| Port {{ add 4100 $i }}
+| freeswitch| network_mode: host | |
+| nginx | network_mode: host| | extra_hosts:
- "host.docker.internal:10.7.7.1"
- "core:10.7.7.2"
- "etherpad:10.7.7.4"
- "webrtc-sfu:10.7.7.10"
- "html5:10.7.7.11"
+| etherpad | bbb-net | 10.7.7.4|
+| redis | bbb-net | 10.7.7.5|
+| mongodb | bbb-net | 10.7.7.6|
+| kurento | network-mode: host | |
+| webrtc-sfu | bbb-net | | network_mode: host
+| fsesl-akka | bbb-net | 10.7.7.14 |
+| apps-akka | bbb-net | 10.7.7.15 |
+| libreoffice | bbb-net | 10.7.7.7 |
+| periodic | bbb-net | 10.7.7.12 |
+| recordings | bbb-net | 10.7.7.16 |
+| webhooks | bbb-net | 10.7.7.17 |
+| https_proxy | bbb-net | |network_mode: host
+| coturn | network_mode: host | |
+| greenlight | | | ports: 10.7.7.1:5000:80
+| prometheus | bbb-net | 10.7.7.33 |
+| bbb-export-annotations | bbb-net | 10.7.7.19 |
+
+```yml
+networks:
+ bbb-net:
+ ipam:
+ driver: default
+ config:
+ - subnet: "10.7.7.0/24"
+```
diff --git a/opt/02-core/bigbluebutton/docs/upgrading.md b/opt/02-core/bigbluebutton/docs/upgrading.md
new file mode 100644
index 0000000..b2e8f7a
--- /dev/null
+++ b/opt/02-core/bigbluebutton/docs/upgrading.md
@@ -0,0 +1,33 @@
+# How To Upgrade bbb-docker
+
+### Breaking changes `v2.7.x` -> `v3.0.x`
+- **A setup behind NAT does currently not work!**
+- `LETSENCRYPT_EMAIL` is now required in `.env` when used with the integrated HAProxy
+- the greenlight postgres database is now called `greenlight` instead of `greenlight-v3`
+
+
+### Breaking changes `v2.6.x` -> `v2.7.x`
+- We use now Docker Compose V2
+ * make sure you have docker ≥ 23.0 installed (`$ docker -v`)
+ * update all usages of `docker-compose` to `docker compose` in your scripts
+
+### Breaking changes `v2.5.x` -> `v2.6.x`
+- Greenlight got fully rewritten
+ * it is starting as a fresh installation. you can migrate your data with `./scripts/greenlight-migrate-v2-v3`
+ * some greenlight settings under `.env` have changed. compare your version with `sample.env`
+ * it is now served directly under `/` and not in `/b`. If you use an reverse proxy not included in this repo, ensure to update your config accordingly!
+
+### Backup
+if you use greenlight, create a database backup first
+```bash
+docker exec -t docker_postgres_1 pg_dumpall -c -U postgres > /root/greenlight_`date +%d-%m-%Y"_"%H_%M_%S`.sql
+```
+
+### Upgrading
+```bash
+# upgrade!
+./scripts/upgrade
+
+# restart updated services
+docker compose up -d --no-build
+```
diff --git a/opt/02-core/bigbluebutton/mod/apps-akka/Dockerfile b/opt/02-core/bigbluebutton/mod/apps-akka/Dockerfile
new file mode 100644
index 0000000..6d4bf57
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/apps-akka/Dockerfile
@@ -0,0 +1,43 @@
+ARG BBB_BUILD_TAG
+FROM bigbluebutton/bbb-build:$BBB_BUILD_TAG AS builder
+
+COPY --from=src-common-message / /bbb-common-message
+
+# build bbb-common-message
+RUN cd /bbb-common-message && ./deploy.sh
+
+# ===================================================
+
+ARG TAG_APPS_AKKA
+
+COPY --from=src-apps-akka / /source
+
+# compile and unzip bin
+RUN cd /source \
+ && sbt universal:packageBin \
+ && unzip /source/target/universal/bbb-apps-akka-0.0.4.zip -d /
+
+# ===================================================
+
+
+FROM bigbluebutton/bbb-build:$BBB_BUILD_TAG AS builder-settings
+RUN wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.44.3/yq_linux_amd64 && chmod a+x /usr/local/bin/yq
+COPY --from=src-config /settings.yml /settings.yml
+ARG TAG_BBB
+RUN yq e -i ".public.app.bbbServerVersion = \"$TAG_BBB\"" /settings.yml
+RUN yq e -i ".public.app.html5ClientBuild = \"$TAG_BBB\"" /settings.yml
+
+
+# ===================================================
+
+FROM alangecker/bbb-docker-base-java
+
+COPY --from=builder-settings /usr/local/bin/yq /usr/local/bin/yq
+COPY --from=builder /bbb-apps-akka-0.0.4 /bbb-apps-akka
+COPY bbb-apps-akka.conf /etc/bigbluebutton/bbb-apps-akka.conf.tmpl
+COPY logback.xml /bbb-apps-akka/conf/logback.xml
+COPY entrypoint.sh /entrypoint.sh
+COPY --from=builder-settings --chown=bigbluebutton:bigbluebutton /settings.yml /usr/share/bigbluebutton/html5-client/private/config/settings.yml
+
+USER bigbluebutton
+ENTRYPOINT /entrypoint.sh
diff --git a/opt/02-core/bigbluebutton/mod/apps-akka/bbb-apps-akka.conf b/opt/02-core/bigbluebutton/mod/apps-akka/bbb-apps-akka.conf
new file mode 100644
index 0000000..e9e3954
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/apps-akka/bbb-apps-akka.conf
@@ -0,0 +1,25 @@
+// include default config from upstream
+include "/bbb-apps-akka/conf/application.conf"
+
+redis {
+ host="10.7.7.5"
+}
+
+services {
+ bbbWebAPI="https://DOMAIN/bigbluebutton/api"
+ sharedSecret="SHARED_SECRET"
+ graphqlMiddlewareAPI = "http://10.7.7.32:8378"
+}
+http {
+ interface = "0.0.0.0"
+}
+
+postgres {
+ properties = {
+ serverName = "postgres"
+ portNumber = "5432"
+ databaseName = "bbb_graphql"
+ user = "postgres"
+ password = "POSTGRES_PASSWORD"
+ }
+}
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/apps-akka/entrypoint.sh b/opt/02-core/bigbluebutton/mod/apps-akka/entrypoint.sh
new file mode 100755
index 0000000..033429e
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/apps-akka/entrypoint.sh
@@ -0,0 +1,17 @@
+#!/bin/sh -e
+
+# bbb-apps-akka.conf
+TARGET=/etc/bigbluebutton/bbb-apps-akka.conf
+cp /etc/bigbluebutton/bbb-apps-akka.conf.tmpl $TARGET
+sed -i "s/DOMAIN/$DOMAIN/" $TARGET
+sed -i "s/SHARED_SECRET/$SHARED_SECRET/" $TARGET
+sed -i "s/POSTGRES_PASSWORD/$POSTGRES_PASSWORD/" $TARGET
+
+
+# settings.yml
+TARGET=/usr/share/bigbluebutton/html5-client/private/config/settings.yml
+yq e -i ".public.kurento.wsUrl = \"wss://$DOMAIN/bbb-webrtc-sfu\"" $TARGET
+yq e -i ".public.pads.url = \"https://$DOMAIN/pad\"" $TARGET
+
+cd /bbb-apps-akka
+/bbb-apps-akka/bin/bbb-apps-akka
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/apps-akka/logback.xml b/opt/02-core/bigbluebutton/mod/apps-akka/logback.xml
new file mode 100644
index 0000000..c29b1fb
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/apps-akka/logback.xml
@@ -0,0 +1,18 @@
+
+
+
+
+ %d{"yyyy-MM-dd'T'HH:mm:ss.SSSXXX"} %-5level %logger{35} - %msg%n
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/opt/02-core/bigbluebutton/mod/base-java/Dockerfile b/opt/02-core/bigbluebutton/mod/base-java/Dockerfile
new file mode 100644
index 0000000..810feee
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/base-java/Dockerfile
@@ -0,0 +1,24 @@
+FROM eclipse-temurin:17-jre-jammy
+
+RUN apt-get update && apt-get install -y \
+ wget unzip gosu locales \
+ imagemagick xpdf-utils curl \
+ && sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen && locale-gen
+
+ENV LANG en_US.UTF-8
+ENV LANGUAGE en_US:en
+ENV LC_ALL en_US.UTF-8
+
+# add user & group
+RUN groupadd -g 998 bigbluebutton \
+ && useradd -m -u 998 -g bigbluebutton bigbluebutton \
+ && mkdir /etc/bigbluebutton \
+ && chown bigbluebutton:bigbluebutton /etc/bigbluebutton
+
+# add dockerize
+ENV DOCKERIZE_VERSION v0.7.0
+RUN wget -q https://github.com/jwilder/dockerize/releases/download/$DOCKERIZE_VERSION/dockerize-linux-amd64-$DOCKERIZE_VERSION.tar.gz \
+ && tar -C /usr/local/bin -xzvf dockerize-linux-amd64-$DOCKERIZE_VERSION.tar.gz \
+ && rm dockerize-linux-amd64-$DOCKERIZE_VERSION.tar.gz
+
+
diff --git a/opt/02-core/bigbluebutton/mod/bbb-export-annotations/Dockerfile b/opt/02-core/bigbluebutton/mod/bbb-export-annotations/Dockerfile
new file mode 100644
index 0000000..d6c591f
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-export-annotations/Dockerfile
@@ -0,0 +1,23 @@
+FROM node:22-bookworm-slim AS builder
+
+COPY --from=src / /bbb-export-annotations
+RUN cd /bbb-export-annotations && npm ci && npm install
+
+# --------------------
+
+FROM node:22-bookworm-slim
+
+RUN groupadd -g 998 bigbluebutton \
+ && useradd -m -u 998 -g bigbluebutton bigbluebutton
+
+RUN apt update && apt install -y \
+ nodejs npm cairosvg ghostscript imagemagick nodejs poppler-utils
+
+COPY --from=builder /bbb-export-annotations /bbb-export-annotations
+COPY ./config/settings.json /bbb-export-annotations/config/settings.json
+
+USER bigbluebutton
+WORKDIR /bbb-export-annotations
+ENV NODE_ENV=production
+
+ENTRYPOINT npm start
diff --git a/opt/02-core/bigbluebutton/mod/bbb-export-annotations/config/settings.json b/opt/02-core/bigbluebutton/mod/bbb-export-annotations/config/settings.json
new file mode 100644
index 0000000..7fe69f4
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-export-annotations/config/settings.json
@@ -0,0 +1,40 @@
+{
+ "log": {
+ "level": "info",
+ "msgName": "PresAnnStatusMsg"
+ },
+ "shared": {
+ "presAnnDropboxDir": "/tmp/pres-ann-dropbox",
+ "cairosvg": "/usr/bin/cairosvg",
+ "ghostscript": "/usr/bin/gs"
+ },
+ "process": {
+ "maxImageWidth": 1440,
+ "maxImageHeight": 1080,
+ "pointsPerInch": 72,
+ "pixelsPerInch": 96,
+ "cairoSVGUnsafeFlag": false
+ },
+ "notifier": {
+ "pod_id": "DEFAULT_PRESENTATION_POD",
+ "is_downloadable": "false",
+ "msgName": "NewPresFileAvailableMsg"
+ },
+ "bbbWebAPI": "http://bbb-web:8090",
+ "bbbPadsAPI": "http://bbb-pads:9002",
+ "redis": {
+ "host": "redis",
+ "port": 6379,
+ "password": null,
+ "channels": {
+ "queue": "exportJobs",
+ "publish": "to-akka-apps-redis-channel"
+ }
+ },
+ "fonts": {
+ "draw": "/usr/local/share/fonts/CaveatBrush-Regular-2015-09-23.ttf",
+ "sans": "/usr/local/share/fonts/CrimsonPro[wght]-1.003.ttf",
+ "serif": "/usr/local/share/fonts/SourceSansPro-Regular-2.045.ttf",
+ "mono": "/usr/local/share/fonts/SourceCodePro-Regular-2.038.ttf"
+ }
+}
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-actions/Dockerfile b/opt/02-core/bigbluebutton/mod/bbb-graphql-actions/Dockerfile
new file mode 100644
index 0000000..66ac9b8
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-actions/Dockerfile
@@ -0,0 +1,34 @@
+ARG BBB_BUILD_TAG
+FROM bigbluebutton/bbb-build:$BBB_BUILD_TAG AS builder
+
+COPY --from=src ./ /src
+RUN cd /src && \
+ npm ci --no-progress && \
+ npm run build
+
+# delete node_modules (it should create a fresh one inside /src/dist/)
+RUN rm -rf /src/node_modules
+
+RUN cd /src/dist && \
+ mv index.js bbb-graphql-actions.js && \
+ cp ../package.json ../package-lock.json . && \
+ npm ci --no-progress --omit=dev
+
+
+# ------------------------------
+FROM node:22-bookworm-slim
+
+RUN groupadd -g 2062 app \
+ && useradd -m -u 2063 -g app app
+
+USER app
+
+WORKDIR /app
+
+ENV SERVER_HOST 0.0.0.0
+ENV BBB_REDIS_HOST redis
+ENV NODE_ENV=production
+
+COPY --from=builder /src/dist /app
+
+CMD [ "node", "/app/bbb-graphql-actions.js" ]
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-actions/Dockerfile.dev b/opt/02-core/bigbluebutton/mod/bbb-graphql-actions/Dockerfile.dev
new file mode 100644
index 0000000..22babbb
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-actions/Dockerfile.dev
@@ -0,0 +1,16 @@
+ARG BBB_BUILD_TAG
+FROM bigbluebutton/bbb-build:$BBB_BUILD_TAG AS builder
+
+RUN apt-get update && apt-get install -y gosu
+
+# allow any user to use node in /root/.nvm
+RUN chmod 755 /root
+
+COPY dev-entrypoint.sh /dev-entrypoint.sh
+ENTRYPOINT [ "/dev-entrypoint.sh" ]
+
+WORKDIR /app
+ENV SERVER_HOST 0.0.0.0
+ENV BBB_REDIS_HOST redis
+
+CMD [ "npm install && npm start" ]
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-actions/dev-entrypoint.sh b/opt/02-core/bigbluebutton/mod/bbb-graphql-actions/dev-entrypoint.sh
new file mode 100755
index 0000000..7c3700c
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-actions/dev-entrypoint.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+# get owner of /app
+OWNER="$(stat -c '%u' "/app")"
+GROUP="$(stat -c '%g' "/app")"
+useradd --home-dir /tmp -u $OWNER user || /bin/true
+
+# run with same user to avoid any issues
+# with file permissions
+. /root/.nvm/nvm.sh
+gosu $OWNER:$GROUP bash -c "$@"
+
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-middleware/Dockerfile b/opt/02-core/bigbluebutton/mod/bbb-graphql-middleware/Dockerfile
new file mode 100644
index 0000000..763ee1a
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-middleware/Dockerfile
@@ -0,0 +1,12 @@
+ARG BBB_BUILD_TAG
+FROM bigbluebutton/bbb-build:$BBB_BUILD_TAG AS builder
+
+COPY --from=src / /src/
+RUN cd /src/ && CGO_ENABLED=0 go build -o bbb-graphql-middleware cmd/bbb-graphql-middleware/main.go
+
+# ------------------------------
+FROM alpine
+COPY --from=builder /src/bbb-graphql-middleware /app/bbb-graphql-middleware
+COPY --from=builder /src/config/config.yml /usr/share/bbb-graphql-middleware/config.yml
+COPY config.yml /etc/bigbluebutton/bbb-graphql-middleware.yml
+CMD [ "/app/bbb-graphql-middleware" ]
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-middleware/Dockerfile.dev b/opt/02-core/bigbluebutton/mod/bbb-graphql-middleware/Dockerfile.dev
new file mode 100644
index 0000000..d1952d4
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-middleware/Dockerfile.dev
@@ -0,0 +1,8 @@
+ARG BBB_BUILD_TAG
+FROM bigbluebutton/bbb-build:$BBB_BUILD_TAG AS builder
+
+WORKDIR /app
+
+ENV GOPATH /gopath
+
+CMD ["go", "run", "cmd/bbb-graphql-middleware/main.go", "--signal", "SIGTERM"]
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-middleware/config.yml b/opt/02-core/bigbluebutton/mod/bbb-graphql-middleware/config.yml
new file mode 100644
index 0000000..f323157
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-middleware/config.yml
@@ -0,0 +1,15 @@
+server:
+ listen_host: 0.0.0.0
+ listen_port: 8378
+redis:
+ host: redis
+ port: 6379
+ password: ""
+hasura:
+ url: ws://nginx:8185/v1/graphql
+graphql-actions:
+ url: http://bbb-graphql-actions:8093
+auth_hook:
+ url: http://bbb-web:8090/bigbluebutton/connection/checkGraphqlAuthorization
+session_vars_hook:
+ url: http://apps-akka:8901/userInfo
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-server/Dockerfile b/opt/02-core/bigbluebutton/mod/bbb-graphql-server/Dockerfile
new file mode 100644
index 0000000..3c087cc
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-server/Dockerfile
@@ -0,0 +1,25 @@
+ARG BBB_BUILD_TAG
+ARG GRAPHQL_ENGINE_TAG
+FROM bigbluebutton/bbb-build:$BBB_BUILD_TAG AS builder
+
+RUN curl -L https://github.com/hasura/graphql-engine/raw/stable/cli/get.sh | INSTALL_PATH=/usr/local/bin VERSION=v2.44.0 bash
+RUN wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 && chmod a+x /usr/local/bin/yq
+
+# ----------------------------
+FROM hasura/graphql-engine:$GRAPHQL_ENGINE_TAG
+
+# install netstat, required for start script
+RUN apt-get update && apt-get install -y net-tools gosu
+
+COPY --from=builder /usr/local/bin/yq /usr/local/bin/yq
+COPY --from=builder /usr/local/bin/hasura /usr/local/bin/hasura
+
+COPY --from=src /bbb_schema.sql /app/
+COPY --from=src /metadata /app/metadata
+
+COPY config.yaml /app/config.yaml
+COPY entrypoint.sh /entrypoint.sh
+COPY start.sh /app/start.sh
+
+ENTRYPOINT [ "/entrypoint.sh" ]
+CMD [ "/app/start.sh" ]
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-server/config.yaml b/opt/02-core/bigbluebutton/mod/bbb-graphql-server/config.yaml
new file mode 100644
index 0000000..cd39dc2
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-server/config.yaml
@@ -0,0 +1,7 @@
+version: 3
+endpoint: http://localhost:8085
+admin_secret: bigbluebutton
+metadata_directory: metadata
+actions:
+ kind: synchronous
+ handler_webhook_baseurl: http://localhost:3000
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-server/entrypoint.sh b/opt/02-core/bigbluebutton/mod/bbb-graphql-server/entrypoint.sh
new file mode 100755
index 0000000..096d49c
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-server/entrypoint.sh
@@ -0,0 +1,27 @@
+#!/bin/bash
+
+# for psql
+export PGHOST=postgres
+export PGUSER="${POSTGRES_USER}"
+export PGPASSWORD="${POSTGRES_PASSWORD}"
+
+
+# for hasura
+export HASURA_GRAPHQL_DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/hasura_app
+export HASURA_GRAPHQL_METADATA_DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/hasura_app
+export HASURA_GRAPHQL_LOG_LEVEL=warn
+export HASURA_GRAPHQL_ENABLE_CONSOLE=false
+export HASURA_GRAPHQL_LIVE_QUERIES_MULTIPLEXED_REFETCH_INTERVAL=250
+export HASURA_GRAPHQL_LIVE_QUERIES_MULTIPLEXED_BATCH_SIZE=1000
+export HASURA_GRAPHQL_STREAMING_QUERIES_MULTIPLEXED_REFETCH_INTERVAL=100
+export HASURA_GRAPHQL_STREAMING_QUERIES_MULTIPLEXED_BATCH_SIZE=1000
+export HASURA_GRAPHQL_SERVER_PORT=8085
+export HASURA_GRAPHQL_ENABLE_TELEMETRY=false
+export HASURA_GRAPHQL_WEBSOCKET_KEEPALIVE=10
+export HASURA_GRAPHQL_AUTH_HOOK=http://apps-akka:8901/userInfo
+export HASURA_BBB_GRAPHQL_ACTIONS_ADAPTER_URL=http://bbb-graphql-actions:8093
+
+
+export HASURA_GRAPHQL_BBB_DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/bbb_graphql
+
+exec $@
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-graphql-server/start.sh b/opt/02-core/bigbluebutton/mod/bbb-graphql-server/start.sh
new file mode 100755
index 0000000..5fc3354
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-graphql-server/start.sh
@@ -0,0 +1,39 @@
+#!/bin/bash
+set -e
+
+cd /app/
+
+# patch database url
+# TODO: this should be possible upstream in BBB via an environment variable
+yq e -i ".[1].configuration.connection_info.database_url = \"$HASURA_GRAPHQL_BBB_DATABASE_URL\"" metadata/databases/databases.yaml
+
+sed -i "s/^admin_secret: .*/admin_secret: $HASURA_GRAPHQL_ADMIN_SECRET/g" /app/config.yaml
+
+echo "SELECT 'CREATE DATABASE hasura_app' WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'hasura_app')\gexec" | psql
+
+echo "Restarting database bbb_graphql"
+psql -c "SELECT pg_terminate_backend(pg_stat_activity.pid) FROM pg_stat_activity WHERE datname = 'bbb_graphql'" > /dev/null
+psql -c "drop database if exists bbb_graphql with (force)"
+psql -c "create database bbb_graphql WITH TEMPLATE template0 LC_COLLATE 'C.UTF-8'"
+psql -c "alter database bbb_graphql set timezone to 'UTC'"
+
+echo "Creating tables in bbb_graphql"
+psql -U postgres -d bbb_graphql -q -f bbb_schema.sql --set ON_ERROR_STOP=on
+
+echo "Starting hasura-graphql-engine"
+gosu nobody graphql-engine serve &
+PID=$!
+
+sleep 1
+
+
+#Check if Hasura is ready before applying metadata
+while ! netstat -tuln | grep ":$HASURA_GRAPHQL_SERVER_PORT " > /dev/null; do
+ echo "Waiting for Hasura's port ($HASURA_GRAPHQL_SERVER_PORT) to be ready..."
+ sleep 1
+done
+
+echo "Applying new metadata to Hasura"
+/usr/local/bin/hasura metadata apply --skip-update-check
+
+wait "$PID"
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-pads/Dockerfile b/opt/02-core/bigbluebutton/mod/bbb-pads/Dockerfile
new file mode 100644
index 0000000..fa6762c
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-pads/Dockerfile
@@ -0,0 +1,18 @@
+FROM node:22-bookworm-slim AS builder
+
+COPY --from=src / /bbb-pads
+RUN cd /bbb-pads && rm -r .git && npm install --production
+
+
+RUN chmod 777 /bbb-pads/config
+# ------------------------------
+
+FROM node:22-bookworm-slim
+
+RUN apt update && apt install -y jq moreutils \
+ && useradd --uid 2003 --create-home --user-group bbb-pads
+
+COPY --from=builder /bbb-pads /bbb-pads
+USER bbb-pads
+COPY entrypoint.sh /entrypoint.sh
+ENTRYPOINT /entrypoint.sh
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-pads/entrypoint.sh b/opt/02-core/bigbluebutton/mod/bbb-pads/entrypoint.sh
new file mode 100755
index 0000000..9f93722
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-pads/entrypoint.sh
@@ -0,0 +1,15 @@
+#!/bin/sh
+set -e
+
+TARGET=/bbb-pads/config/settings.json
+
+cp /bbb-pads/config/settings.json.template $TARGET
+sed -i "s/ETHERPAD_API_KEY/\"$ETHERPAD_API_KEY\"/g" $TARGET
+jq '.etherpad.host = "etherpad"' $TARGET | sponge $TARGET
+jq '.express.host = "0.0.0.0"' $TARGET | sponge $TARGET
+jq '.redis.host = "redis"' $TARGET | sponge $TARGET
+
+
+cd /bbb-pads
+export NODE_ENV=production
+npm start
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-web/Dockerfile b/opt/02-core/bigbluebutton/mod/bbb-web/Dockerfile
new file mode 100644
index 0000000..e5fefa5
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-web/Dockerfile
@@ -0,0 +1,57 @@
+ARG BBB_BUILD_TAG
+FROM bigbluebutton/bbb-build:$BBB_BUILD_TAG AS builder
+
+COPY --from=src-common-message / /bbb-common-message
+
+# build bbb-common-message
+RUN cd /bbb-common-message && ./deploy.sh
+
+# ===================================================
+
+
+COPY --from=src-common-web / /bbb-common-web
+# build bbb-common-web
+RUN cd /bbb-common-web && ./deploy.sh
+
+COPY --from=src-web / /bbb-web
+
+# compile bbb-web
+RUN cd /bbb-web && grails assemble
+
+# compile pres-checker
+RUN cd /bbb-web/pres-checker && gradle resolveDeps
+
+# extract .war
+RUN unzip -q /bbb-web/build/libs/bigbluebutton-0.10.0.war -d /dist
+
+
+# ===================================================
+FROM alangecker/bbb-docker-base-java
+
+# add blank presentation files and allow conversion to pdf/svg
+RUN mkdir -p /usr/share/bigbluebutton/blank \
+ && cd /usr/share/bigbluebutton/blank \
+ && wget \
+ https://raw.githubusercontent.com/bigbluebutton/bigbluebutton/v2.4.0/bigbluebutton-config/slides/blank-svg.svg \
+ https://raw.githubusercontent.com/bigbluebutton/bigbluebutton/v2.4.0/bigbluebutton-config/slides/blank-thumb.png \
+ https://raw.githubusercontent.com/bigbluebutton/bigbluebutton/v2.4.0/bigbluebutton-config/slides/blank-presentation.pdf \
+ https://raw.githubusercontent.com/bigbluebutton/bigbluebutton/v2.4.0/bigbluebutton-config/slides/blank-png.png \
+ && sed -i 's///g' /etc/ImageMagick-6/policy.xml \
+ && sed -i '/potrace/d' /etc/ImageMagick-6/delegates.xml
+
+
+# get bbb-web
+COPY --from=builder /dist /usr/share/bbb-web
+
+# get pres-checker
+COPY --from=builder /bbb-web/pres-checker/lib /usr/share/prescheck/lib
+COPY --from=builder /bbb-web/pres-checker/run.sh /usr/share/prescheck/prescheck.sh
+
+# add entrypoint and templates
+COPY entrypoint.sh /entrypoint.sh
+COPY bbb-web.properties /etc/bigbluebutton/bbb-web.properties.tmpl
+COPY turn-stun-servers.xml /etc/bigbluebutton/turn-stun-servers.xml.tmpl
+COPY logback.xml /usr/share/bbb-web/WEB-INF/classes/logback.xml
+COPY office-convert.sh /usr/share/bbb-libreoffice-conversion/convert.sh
+
+ENTRYPOINT ["/entrypoint.sh"]
diff --git a/opt/02-core/bigbluebutton/mod/bbb-web/bbb-web.properties b/opt/02-core/bigbluebutton/mod/bbb-web/bbb-web.properties
new file mode 100644
index 0000000..7dc9d15
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-web/bbb-web.properties
@@ -0,0 +1,26 @@
+defaultWelcomeMessage={{ .Env.WELCOME_MESSAGE }}
+defaultWelcomeMessageFooter={{ .Env.WELCOME_FOOTER }}
+
+{{ if isTrue .Env.ENABLE_RECORDING }}
+disableRecordingDefault=false
+{{ else }}
+disableRecordingDefault=true
+{{ end }}
+
+bigbluebutton.web.serverURL=https://{{ .Env.DOMAIN }}
+
+securitySalt={{ .Env.SHARED_SECRET }}
+
+redisHost=redis
+
+{{ if isTrue .Env.IGNORE_TLS_CERT_ERRORS }}
+beans.presentationService.defaultUploadedPresentation=https://test27.bigbluebutton.org/default.pdf
+# fetch presentations without HTTPS
+presentationBaseURL=http://{{ .Env.DOMAIN }}/bigbluebutton/presentation
+{{else}}
+beans.presentationService.defaultUploadedPresentation=${bigbluebutton.web.serverURL}/default.pdf
+{{end}}
+
+learningDashboardEnabled={{ .Env.ENABLE_LEARNING_DASHBOARD }}
+
+defaultNumDigitsForTelVoice=9
\ No newline at end of file
diff --git a/opt/02-core/bigbluebutton/mod/bbb-web/entrypoint.sh b/opt/02-core/bigbluebutton/mod/bbb-web/entrypoint.sh
new file mode 100755
index 0000000..7c9506b
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-web/entrypoint.sh
@@ -0,0 +1,31 @@
+#!/bin/bash
+set -e
+
+# create recording directory structure if it doesn't exist yet
+mkdir -p /var/bigbluebutton/recording/status
+mkdir -p /var/bigbluebutton/events
+mkdir -p /var/bigbluebutton/recording
+mkdir -p /var/bigbluebutton/recording/raw
+mkdir -p /var/bigbluebutton/recording/process
+mkdir -p /var/bigbluebutton/recording/publish
+mkdir -p /var/bigbluebutton/recording/status/recorded
+mkdir -p /var/bigbluebutton/recording/status/archived
+mkdir -p /var/bigbluebutton/recording/status/processed
+mkdir -p /var/bigbluebutton/recording/status/ended
+mkdir -p /var/bigbluebutton/recording/status/sanity
+mkdir -p /var/bigbluebutton/recording/status/published
+mkdir -p /var/bigbluebutton/captions
+mkdir -p /var/bigbluebutton/captions/inbox
+mkdir -p /var/bigbluebutton/published
+mkdir -p /var/bigbluebutton/deleted
+mkdir -p /var/bigbluebutton/unpublished
+mkdir -p /var/bigbluebutton/basic_stats
+chown -R bigbluebutton:bigbluebutton /var/bigbluebutton
+
+cd /usr/share/bbb-web/
+dockerize \
+ -template /etc/bigbluebutton/bbb-web.properties.tmpl:/etc/bigbluebutton/bbb-web.properties \
+ -template /etc/bigbluebutton/turn-stun-servers.xml.tmpl:/etc/bigbluebutton/turn-stun-servers.xml \
+ gosu bigbluebutton java -Dgrails.env=prod -Dserver.address=0.0.0.0 -Dserver.port=8090 -Dspring.main.allow-circular-references=true -Xms384m -Xmx384m -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/bigbluebutton/diagnostics -cp WEB-INF/lib/*:/:WEB-INF/classes/:. org.springframework.boot.loader.WarLauncher
+
+
diff --git a/opt/02-core/bigbluebutton/mod/bbb-web/logback.xml b/opt/02-core/bigbluebutton/mod/bbb-web/logback.xml
new file mode 100644
index 0000000..def4f59
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-web/logback.xml
@@ -0,0 +1,28 @@
+
+
+
+
+ %d{"yyyy-MM-dd'T'HH:mm:ss.SSSXXX"} %-5level %logger{35} - %msg%n
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/opt/02-core/bigbluebutton/mod/bbb-web/office-convert.sh b/opt/02-core/bigbluebutton/mod/bbb-web/office-convert.sh
new file mode 100755
index 0000000..f896bfc
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-web/office-convert.sh
@@ -0,0 +1,36 @@
+#!/bin/bash
+set -e
+set -u
+PATH="/bin/:/usr/bin/"
+
+# This script receives three params
+# Param 1: Input office file path (e.g. "/tmp/test.odt")
+# Param 2: Output pdf file path (e.g. "/tmp/test.pdf")
+# Param 3: Destination Format (pdf default)
+# Param 4: Timeout (secs) (optional)
+
+if (( $# == 0 )); then
+ echo "Missing parameter 1 (Input office file path)";
+ exit 1
+elif (( $# == 1 )); then
+ echo "Missing parameter 2 (Output pdf file path)";
+ exit 1
+fi;
+
+
+source="$1"
+dest="$2"
+
+# If output format is missing, define PDF
+convertTo="${3:-pdf}"
+
+# If timeout is missing, define 60
+timeoutSecs="${4:-60}"
+# Truncate timeout to max 3 digits (as expected by sudoers)
+timeoutSecs="${timeoutSecs:0:3}"
+
+# The timeout is important.
+
+timeout $(printf %03d $timeoutSecs)s curl -F "data=@${source}" -k https://collabora:9980/cool/convert-to/$convertTo > "${dest}"
+
+exit 0
diff --git a/opt/02-core/bigbluebutton/mod/bbb-web/turn-stun-servers.xml b/opt/02-core/bigbluebutton/mod/bbb-web/turn-stun-servers.xml
new file mode 100644
index 0000000..de92838
--- /dev/null
+++ b/opt/02-core/bigbluebutton/mod/bbb-web/turn-stun-servers.xml
@@ -0,0 +1,59 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{if and (isTrue .Env.ENABLE_HTTPS_PROXY) (not (isTrue .Env.IGNORE_TLS_CERT_ERRORS)) }}
+ {{/* ignore when using a self signed certificate in dev mode */}}
+
+
+
+
+
+ {{end}}
+
+
+ {{if .Env.TURN_EXT_SERVER }}
+
+
+
+
+
+ {{end}}
+
+
+
+
+