====== Сервис BBB ======

  * [[https://docs.bigbluebutton.org/administration/install/]]
  * [[https://github.com/bigbluebutton/bbb-install/]]

  * [[https://bigbluebutton.ru/kak-administrirovat-server.html|Как администрировать сервер BigBlueButton]]
  * https://stackoverflow.com/questions/61238720/check-number-of-active-meetings-in-big-blue-button-from-command-line


===== Системные требования =====

  * RAM: 8Gb, CPU: 4, HDD: Занимает 12 Gb
  * [[Управление файловыми системами в Linux#Расширение существующего логического тома]]

===== Установка и запуск =====


  * [[https://github.com/bigbluebutton/bbb-install/blob/master/bbb-install.sh]]
  * [[https://docs.bigbluebutton.org/greenlight/v3/install/|Install Greenlight v3]]

  * [[Пакет OpenSSL#Импорт сертификата центра сертификации]] (нужно для работы curl при развертывании)

<code>
mkdir -p /local/certs/

cat wild.crt ca.crt > /local/certs/fullchain.pem

cp wild.key /local/certs/privkey.pem

# time wget -qO- https://raw.githubusercontent.com/bigbluebutton/bbb-install/v3.0.x-release/bbb-install.sh | bash -s -- -v jammy-300 -s webinar.corp13.un -d -g
real    43m1.513s

# bbb-conf --status
</code>

  * При использовании корпоративного УЦ, с само подписанным корневым сертификатом, понадобится [[Технология Docker#Копирование файлов в контейнер]]

===== Обновление сертификата =====

  * [[https://stackoverflow.com/questions/77167714/unable-to-run-bigbluebutton-with-custom-ssl-certificate-due-to-invalid-configura|Unable to run BigBlueButton with custom ssl certificate due to invalid configuration of nginx]]

<code>
# cat wild.crt ca.crt wild.key > /etc/haproxy/certbundle.pem

# service haproxy restart
</code>
===== Интеграция с внешним Keycloak =====

  * [[https://docs.bigbluebutton.org/greenlight/v3/external-authentication/|External Authentication OpenID Connect vs Keycloak]]

<code>
root@webinar.corp13.un:~# cd /root/greenlight-v3

root@webinar.corp13.un:~/greenlight-v3# cat .env
</code><code>
...
OPENID_CONNECT_CLIENT_ID=any-client
OPENID_CONNECT_CLIENT_SECRET=anystring
OPENID_CONNECT_ISSUER=https://keycloak.corp13.un/realms/corp13
OPENID_CONNECT_REDIRECT=https://webinar.corp13.un/
...
</code><code>
root@webinar.corp13.un:~/greenlight-v3# docker-compose up -d
</code>

  * [[https://github.com/bigbluebutton/bigbluebutton/issues/7985|certificate verify failed #7985]]
  * [[https://github.com/bigbluebutton/greenlight/issues/1305|BigBlueButton Endpoint and Secret]]

===== Управление пользователями =====
<code>
root@webinar:~# docker exec -it greenlight-v3 bundle exec rake user:set_admin_role['user1@corp13.un']

root@webinar:~# docker exec -it greenlight-v3 bundle exec rails c
greenlight(prod)> 
User.all.pluck(:name, :email)
User.find_by(email: 'user2@corp13.un')
User.find_by(email: "user2@corp13.un").destroy

root@webinar:~# docker exec -it greenlight-v3 bash -c "echo User.all.pluck\(:name, :email\) | bundle exec rails c"
</code>