Bedrud

Self-hosted video meeting platform — a single binary that packages the web UI, REST API, and WebRTC media server into one deployable unit.

Deploying self-hosted video infrastructure typically requires managing multiple services, external media servers, and separate client applications. Bedrud solves this by packaging the web UI, REST API, and a WebRTC media server into a single, lightweight binary, giving privacy-conscious teams complete control without the DevOps headache.

Why Bedrud?

	Bedrud	Jitsi Meet	BigBlueButton
Deployment	Single binary, no dependencies	Multiple services (Jicofo, JVB, Prosody)	Heavy stack (Tomcat, Redis, FreeSWITCH, etc.)
Media server	Embedded LiveKit SFU	External Jitsi Videobridge	External FreeSWITCH
Native clients	Android, iOS, Desktop (Rust)	Web only (Electron wrapper)	Web only
Mobile multi-server	Connect to multiple instances	Single server	Single server
Built-in installer	`bedrud install` (systemd + TLS)	Manual setup	Manual setup
Resource usage	~200 MB RAM*	~1 GB+ RAM*	~2 GB+ RAM*

*Approximate, varies by load and configuration.

Designed for privacy-first teams who want full control without managing complex infrastructure.

Quick Start

Run with Docker:

docker run -p 8090:8090 -p 7880:7880 ghcr.io/bedrud-ir/bedrud:latest

Open http://localhost:8090, create an account, and start a meeting.

Demo coming soon.

Screenshots

Web UI

Web meeting room with video grid, chat sidebar, and controls.

Desktop App (Windows / Linux / macOS)

Native desktop client with picture-in-picture and system integration.

Android

Android meeting view with material design and gesture controls.

iOS

iOS meeting interface with SwiftUI and native iOS integration.

Features

Video & Audio Meetings — WebRTC-powered rooms via an embedded LiveKit media server
Single Binary — Go server with the React frontend and LiveKit compiled in; no runtime dependencies
Native Client Apps — Android (Jetpack Compose), iOS (SwiftUI), and desktop (Rust + Slint for Windows, Linux, and macOS) with picture-in-picture, deep linking, and call management
Multiple Auth Methods — Email/password, OAuth (Google, GitHub, Twitter), guest access, and FIDO2 passkeys
Room Controls — Public/private rooms, admin kick/mute/video-off, participant management
Multi-Instance — Mobile and desktop apps can connect to multiple Bedrud servers simultaneously
Bot Agents — Python agents for streaming music, radio, and video into rooms
Built-in Installer — bedrud install sets up systemd services, TLS certificates, and configuration on Debian/Ubuntu
Docker Support — Multi-stage Dockerfile and GHCR image for containerized deployments

Installation

Docker (Recommended)

docker pull ghcr.io/bedrud-ir/bedrud:latest
docker run -p 8090:8090 -p 7880:7880 ghcr.io/bedrud-ir/bedrud:latest

Tip

Ports 8090 (web UI + API) and 7880 (WebRTC media) must both be exposed. For production, use a reverse proxy (Traefik, Caddy, nginx) with TLS on port 8090.

Ports

Port	Protocol	Purpose
8090	TCP	Web UI, REST API, WebSocket
7880	TCP	LiveKit signaling
50000–60000	UDP	WebRTC media (configurable range)
3478	UDP	TURN relay
5349	TCP	TURN/TLS relay

Build Docker image from source

docker build -t bedrud .
docker run -p 8090:8090 -p 7880:7880 bedrud

Binary Download

Download pre-built binary

curl -L https://github.com/bedrud-ir/bedrud/releases/latest/download/bedrud_linux_amd64.tar.xz | tar xJ
sudo mv bedrud /usr/local/bin/
sudo bedrud install   # sets up systemd, TLS, and config

See latest release for all platforms.

Ubuntu/Debian (APT)

Install via apt repository

curl -fsSL https://bedrud-ir.github.io/bedrud/bedrud.gpg.key \
  | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/bedrud.gpg
echo "deb https://bedrud-ir.github.io/bedrud stable main" \
  | sudo tee /etc/apt/sources.list.d/bedrud.list
sudo apt update && sudo apt install bedrud
sudo bedrud install

Arch Linux (AUR)

Install from AUR

yay -S bedrud-bin
sudo bedrud install

Desktop Client

Ubuntu/Debian (apt)

# After adding the repo above:
sudo apt install bedrud-desktop

Arch Linux (AUR)

yay -S bedrud-desktop-bin

AppImage (any Linux)

wget https://github.com/bedrud-ir/bedrud/releases/latest/download/bedrud-desktop-linux-x86_64.AppImage
chmod +x bedrud-desktop-linux-x86_64.AppImage
./bedrud-desktop-linux-x86_64.AppImage

macOS (unsigned)

# Apple Silicon
curl -L https://github.com/bedrud-ir/bedrud/releases/latest/download/bedrud-desktop-macos-arm64.tar.gz | tar xz
# Intel
curl -L https://github.com/bedrud-ir/bedrud/releases/latest/download/bedrud-desktop-macos-x86_64.tar.gz | tar xz

[!WARNING] macOS builds are unsigned. Gatekeeper will block the app on first launch. To bypass: xattr -d com.apple.quarantine bedrud-desktop or allow it in System Settings → Privacy & Security.

Windows

Download the NSIS installer or portable .zip from the latest release for x86_64 or ARM64.

See the Package Installation guide for full details on all platforms.

Configuration

Development: server/config.yaml (auto-generated by make init from config.local.yaml) Production: /etc/bedrud/config.yaml (set up by bedrud install)

Override path: CONFIG_PATH=/path/to/config.yaml bedrud run

Minimum production changes:

auth:
  jwtSecret: "change-to-random-string-32-chars"
  sessionSecret: "change-to-another-random-string"

See the Configuration guide for the full reference, LiveKit settings, environment variables, and production checklist.

Security

Change default secrets — jwtSecret and sessionSecret must be set to strong random values in production
TLS is required — use bedrud install (Let's Encrypt), a reverse proxy, or set server.enableTLS: true
Firewall — open only the ports listed above; restrict LiveKit UDP range to your needs

See the Production Checklist for a complete list.

Troubleshooting

Issue	Cause	Fix
No video/audio	UDP ports blocked	Open port range 50000–60000 (or your configured `rtc.port_range_start`–`port_range_end`)
Media works on LAN only	Missing external IP	Set `rtc.use_external_ip: true` and configure your public IP in LiveKit config
TURN not connecting	TLS certificate missing	TURN/TLS (port 5349) needs a valid certificate. See TURN Server Guide
CORS errors in browser	Mismatched origins	Set `cors.allowedOrigins` to your frontend URL

For more, see WebRTC Connectivity and TURN Server.

Architecture

%%{init: {'theme': 'forest'}}%%
graph TB
    subgraph Clients
        WEB["Web Browser<br/>(React + TanStack Start)"]
        ANDROID["Android<br/>(Jetpack Compose)"]
        IOS["iOS<br/>(SwiftUI)"]
        DESKTOP["Desktop<br/>(Rust + Slint)"]
    end

    subgraph "Bedrud Server (Single Binary)"
        API["REST API<br/>(Go + Fiber)"]
        AUTH["Auth Layer<br/>(JWT / OAuth2 / FIDO2)"]
        LIVEKIT["Embedded LiveKit SFU<br/>(WebRTC Media)"]
        EMBED["Embedded Frontend<br/>(React SPA)"]
    end

    subgraph Storage
        DB[("SQLite / PostgreSQL<br/>(GORM)")]
    end

    WEB -->|HTTP/WS| API
    WEB -->|WebRTC| LIVEKIT
    ANDROID -->|REST API| API
    ANDROID -->|WebRTC| LIVEKIT
    IOS -->|REST API| API
    IOS -->|WebRTC| LIVEKIT
    DESKTOP -->|REST API| API
    DESKTOP -->|WebRTC| LIVEKIT

    API --> AUTH
    AUTH --> DB
    API --> DB
    API --> LIVEKIT
    EMBED --> API

Project Structure

bedrud/
├── server/          Go backend (Fiber, GORM, embedded LiveKit)
├── apps/
│   ├── web/         React frontend (TanStack Start, TailwindCSS v4)
│   ├── android/     Jetpack Compose app (Koin, Retrofit, LiveKit SDK)
│   ├── ios/         SwiftUI app (KeychainAccess, LiveKit SDK)
│   └── desktop/     Native desktop app (Rust, Slint, LiveKit SDK)
├── agents/          Python bots (music, radio, video stream)
├── packages/        Shared TypeScript types (@bedrud/api-types)
├── tools/cli/       Deployment CLI (pyinfra, Click)
├── Cargo.toml       Rust workspace root
└── docs/images/       Platform screenshots (SVG)

See the Architecture Overview for detailed documentation.

Documentation

Full documentation: bedrud.org/en/docs

Key pages:

Development Setup

Prerequisites

Go 1.24+
Bun (JavaScript runtime / package manager)
LiveKit Server (for local development)

Commands

git clone https://github.com/bedrud-ir/bedrud.git
cd bedrud
make init     # install all dependencies
make dev      # start LiveKit + server + web frontend

The web frontend runs at http://localhost:3000 and the API at http://localhost:8090.

See AGENTS.md for the full developer guide including build order, testing, and common gotchas.

Note

API docs available at http://localhost:8090/api/swagger (Swagger UI) or http://localhost:8090/api/scalar (Scalar UI) when the server is running.

For detailed platform-specific development setup, see the Development Workflow guide.

Production Build

make build         # Build frontend + backend into a single binary
make build-dist    # Build compressed linux/amd64 tarball (release artifact)

Client Apps

Client	Platform	Stack	Download
Web	Browser	React 19, TanStack Start	N/A (runs on server)
Android	API 28+	Kotlin, Jetpack Compose, LiveKit SDK	APK / Play Store
iOS	18.0+	Swift, SwiftUI, LiveKit SDK	IPA / App Store
Desktop	Windows / Linux / macOS	Rust, Slint, LiveKit SDK	Installers

Note

Building client apps from source? See Development Setup and Contributing Guide for platform-specific commands.

Bot Agents

Stream media into meeting rooms using Python agents:

cd agents/music_agent
python -m venv .venv
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
pip install -r requirements.txt
python agent.py "https://meet.example.com/m/room-name"

Available agents: music_agent, radio_agent, video_stream_agent.

Tech Stack

Go + Fiber backend · React 19 frontend · LiveKit WebRTC SFU · Android / iOS / Desktop native clients

View full technology stack

Layer	Technology
Backend	Go 1.24, Fiber, GORM, LiveKit Protocol SDK
Web Frontend	React 19, TanStack Start, TanStack Router, TailwindCSS v4, Vite
Android	Kotlin, Jetpack Compose, Koin, Retrofit, LiveKit Android SDK
iOS	Swift, SwiftUI, KeychainAccess, LiveKit Swift SDK
Desktop	Rust, Slint, reqwest, LiveKit Rust SDK
Auth	JWT, OAuth2 (Goth), WebAuthn / FIDO2 Passkeys
Database	SQLite (default), PostgreSQL (production)
Media	LiveKit (embedded WebRTC SFU)
CI/CD	GitHub Actions, Docker, GHCR
Deployment	pyinfra, systemd, Traefik

Makefile Reference

View all Makefile targets

Command	Description
`make help`	Show all available targets
`make init`	Install all dependencies
`make dev`	Run LiveKit + server + web concurrently
`make build`	Build frontend + backend (embedded single binary)
`make build-dist`	Build production linux/amd64 tarball
`make build-android-debug`	Build Android debug APK
`make build-android`	Build Android release APK
`make build-ios`	Build iOS archive
`make build-ios-sim`	Build for iOS simulator
`make build-desktop`	Build desktop release binary
`make dev-desktop`	Run desktop app (debug)
`make test-back`	Run server tests
`make deploy ARGS=...`	Run deployment CLI
`make clean`	Remove build artifacts

For the full target list, see the Makefile Reference or run make help.

Project Status

Bedrud is in active development. Core features are functional and used in production. Breaking API changes are possible before v1.0; minor versions may include non-breaking additions.

Roadmap

Screen sharing with annotation tools
End-to-end encryption (E2EE) for peer-to-peer rooms
Recording and playback (server-side + participant local)
Breakout rooms
SIP/VoIP gateway for dial-in access
LDAP / SAML / OIDC enterprise authentication
Whiteboard collaboration (shared canvas)
Signed and notarized macOS / Windows builds

See GitHub Issues and Discussions for the latest plans.

Support

Bug Reports & Feature Requests: GitHub Issues
Architecture Discussions & Questions: GitHub Discussions
Documentation: bedrud.org/en/docs

Note

Before reporting issues, please check existing issues and documentation to avoid duplicates.

Contributing

Contributions are welcome! Please open an issue first for significant changes.

See CONTRIBUTING.md and the online Contributing Guide for:

Development setup instructions
Code style conventions
Pull request process
CI/CD checks

License

Apache-2.0

By contributing to Bedrud, you agree that your contributions will be licensed under the Apache License 2.0.

Name		Name	Last commit message	Last commit date
Latest commit History 391 Commits
.github		.github
agents		agents
apps		apps
docs/images		docs/images
packages		packages
server		server
tools/cli		tools/cli
.dockerignore		.dockerignore
.gitignore		.gitignore
CONTRIBUTING.md		CONTRIBUTING.md
Cargo.lock		Cargo.lock
Cargo.toml		Cargo.toml
Dockerfile		Dockerfile
LICENSE		LICENSE
Makefile		Makefile
NOTICE		NOTICE
README.md		README.md

Folders and files

Latest commit

History

Repository files navigation

Bedrud

Why Bedrud?

Quick Start

Table of Contents

Screenshots

Web UI

Desktop App (Windows / Linux / macOS)

Android

iOS

Features

Installation

Docker (Recommended)

Ports

Binary Download

Ubuntu/Debian (APT)

Arch Linux (AUR)

Desktop Client

Configuration

Security

Troubleshooting

Architecture

Project Structure

Documentation

Development Setup

Prerequisites

Commands

Production Build

Client Apps

Bot Agents

Tech Stack

Makefile Reference

Project Status

Roadmap

Support

Contributing

License

About

Topics

Resources

License

Contributing

Uh oh!

Stars

Watchers

Forks

Releases 75

Packages 0

Uh oh!

Uh oh!

Contributors

Uh oh!

Languages

Packages