diff --git a/lib/files/jitsi/README.md b/lib/files/jitsi/README.md
new file mode 100644
index 0000000..1f1a0da
--- /dev/null
+++ b/lib/files/jitsi/README.md
@@ -0,0 +1,6 @@
+The files here are unmodified copies of the tarballs at
+https://github.com/jitsi/docker-jitsi-meet/tags
+
+The only purpose is extracting `gen-passwords.sh`, so
+it is ok for the file to be out of sync with the
+container being used as long as that file remains unchanged.
diff --git a/lib/jitsi.sh b/lib/jitsi.sh
index cfec81c..7d7b190 100644
--- a/lib/jitsi.sh
+++ b/lib/jitsi.sh
@@ -17,8 +17,8 @@ config_jitsi() {
 #    chmod 644 /federated/apps/jitsi/data/config/keys/*.pem
   fi
 
-# Extract Jitsi into /federated/apps/jitsi
-tar zxvf /federated/lib/files/jitsi/stable-* --strip-components 1 -C /federated/apps/jitsi &> /dev/null
+# Extract Jitsi's gen-password.sh into /federated/apps/jitsi
+tar zxvf /federated/lib/files/jitsi/stable-* --strip-components 1 --wildcards -C /federated/apps/jitsi '*/gen-passwords.sh' &> /dev/null
 [ $? -ne 0 ] && fail "Couldn't extract files/jitsi/stable* into /federated/apps/jitsi"
 
 # Create docker compose file