Zen

Traduction

Anglais type: Plain text
Run the below command inside the certbot container to give read access to the new certs and private keys to the peertube group. *Note*: This will also make the files readable to the group with id 999 on the host system. Check the groups on your system to assess this as a risk before running this command.
0/3070 · 307

Connectez-vous pour enregistrer vos traductions.

Anglais Japonais Actions
This method works with the officially supported [Docker guide](https://docs.joinpeertube.org/install/docker) from PeerTube.
 
First, ensure you create a DNS entry for `room.your_instance.tld`, which points to your server. You can use a CNAME entry (or an A entry and a AAAA entry). This is necessary for Let's Encrypt to validate the domain for certificate generation.
 
Enter the directory where your `docker-compose.yml` file exists.
 
Open a shell in the certbot container:
 
docker exec -it certbot /bin/sh
 
Run certbot:
 
certbot
 
You will be presented with a series of prompts. Enter `2` for the authentication type:
 
How would you like to authenticate with the ACME CA?
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
 
Enter the domain name `room.your_instance.tld`:
 
Please enter the domain name(s) you would like on your certificate (comma and/or space separated) (Enter 'c' to cancel): room.your_instance.tld
 
Enter the directory where the PeerTube webserver serves requests for Let's Encrypt, `/var/www/certbot`:
 
Input the webroot for <room.your_instance.tld>: (Enter 'c' to cancel): /var/www/certbot
 
You should see output like the following:
 
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/room.your_instance.tld/fullchain.pem
Key is saved at: /etc/letsencrypt/live/room.your_instance.tld/privkey.pem
 
Run the below command inside the certbot container to give read access to the new certs and private keys to the peertube group. *Note*: This will also make the files readable to the group with id 999 on the host system. Check the groups on your system to assess this as a risk before running this command.
 
chown -R root:999 /etc/letsencrypt/live; \
chmod 750 /etc/letsencrypt/live; \
chown -R root:999 /etc/letsencrypt/archive; \
chmod 750 /etc/letsencrypt/archive; \
find /etc/letsencrypt/ -name 'privkey*' -exec chmod 0640 {} \;
 
Exit the certbot container:
 
exit
 
Modify your `docker-compose.yml` file, changing the `entrypoint` line under the `certbot` service to the following. This is the same as the above, but to be automatically executed after every certificate renewal.
 
entrypoint: /bin/sh -c "trap exit TERM; while :; do certbot renew --webroot -w /var/www/certbot; chown -R root:999 /etc/letsencrypt/live; chmod 750 /etc/letsencrypt/live; chown -R root:999 /etc/letsencrypt/archive; chmod 750 /etc/letsencrypt/archive; find /etc/letsencrypt/ -name 'privkey*' -exec chmod 0640 {} +; sleep 12h & wait $${!}; done;"
 
Continuing to modify `docker-compose.yml`, add the certbot certificate volume into the peertube container. It should look something like this:
 
volumes:
- ./docker-volume/certbot/conf:/etc/letsencrypt
 
Restart your services:
 
docker-compose down; docker-comopse up -d
 
In the livechat plugin settings from your PeerTube administration settings, set the certificate directory to the following:
 
/etc/letsencrypt/live
 
Save the plugin settings and verify Prosody can see the certificates:
 
docker-compose exec -u peertube \
peertube \
/data/plugins/data/peertube-plugin-livechat/prosodyAppImage/squashfs-root/AppRun \
prosodyctl \
--config /data/plugins/data/peertube-plugin-livechat/prosody/prosody.cfg.lua \
check certs
 
Troubleshooting
 
If you can't make it work, you can use the diagnostic tool (there is a button on top of the plugin settings page), and take a close look on the «Prosody check» section.
 

Chargement…

Avatar de l’utilisateur Aucun

Chaîne mise à jour dans le dépôt
Run the below command inside the certbot container to give read access to the new certs and private keys to the peertube group. *Note*: This will also make the files readable to the group with id 999 on the host system. Check the groups on your system to assess this as a risk before running this command.
 
Il y a un an
Parcourir toutes les modifications de chaînes

Glossaire

Anglais Japonais
Aucune chaîne correspondante n’a été trouvée dans le glossaire.

Informations sur la chaîne

Description de la chaîne source
type: Plain text
Emplacement de la chaîne source
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Âge de la chaîne
Il y a un an
Date de dernière mise à jour
Il y a un mois
Âge de la chaîne source
Il y a un an
Fichier de traduction
support/documentation/po/livechat.ja.po, chaîne 282