Zen

Traduction

Anglais type: Fenced code block (bash)
#!/bin/sh
/var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosodyAppImage/squashfs-root/AppRun prosodyctl \
--root \
--config /var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosody/prosody.cfg.lua \
cert import \
room.your_instance.tld your_instance.tld /etc/letsencrypt/live
0/3170 · 317

Connectez-vous pour enregistrer vos traductions.

Anglais Chinois (sinogrammes traditionnels) Actions
The plugin will check once a day to see if any files have been modified in this folder, and reload Prosody if necessary.
 
Method for the simple case
 
We assume here that your Peertube installation is "classic" (no use of Docker), and that the certificates are generated by letsencrypt, using the certbot tool.
 
First of all, we'll have to create a certificate for the subdomain `room.your_instance.tld` : this is the uri of the MUC (XMPP chat rooms) component. Even if the connections are made on `your_instance.tld`, we will need a valid certificate for this subdomain.
 
So start by setting up a DNS entry for `room.your_instance.tld`, which points to your server. You can use a CNAME entry (or an A entry and a AAAA entry).
 
Next, we'll use nginx (already installed for your Peertube) to generate the certbot certificate. We will create a new site. In the file `/etc/nginx/site-available/room.peertube`, add:
 
server {
listen 80;
listen [::]:80;
server_name room.your_instance.tld;

location /.well-known/acme-challenge/ {
default_type "text/plain";
root /var/www/certbot;
}
location / { return 301 https://your_instance.tld; }
}
 
Then enable the site:
 
ln -s /etc/nginx/sites-available/room.peertube /etc/nginx/sites-enabled/
systemc reload nginx
 
Then we prepare the folder in which we will later import the certificates. We assume here that you already have the plugin active. We will create the following folder (if it doesn't already exist), with the user `peertube` to make sure there are no permissions issues:
 
sudo -u peertube mkdir /var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosody/certs
 
Now you have to configure this folder in the plugin settings, for the parameter "Certificate folders". It's important to do this now, otherwise the certificate import script will put the certificates in the wrong folder.
 
We will configure certbot to import the generated certificates into the Prosody folder. We can use the ProsodyCtl utility packaged in the plugin.
 
Note: for it to be available, the plugin must have been started at least once.
 
We will create a file `/etc/letsencrypt/renewal-hooks/deploy/prosody.sh` containing:
 
#!/bin/sh
/var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosodyAppImage/squashfs-root/AppRun prosodyctl \
--root \
--config /var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosody/prosody.cfg.lua \
cert import \
room.your_instance.tld your_instance.tld /etc/letsencrypt/live
 
Then we ask to generate the certificate:
 
certbot -d room.videos.john-livingston.fr
 
If certbot offers you several methods to generate the certificate, choose "nginx".
 
Normally you should now find the certificates in the configured folder.
 
Note: the first time you do this, you will have to reload Prosody. The easiest way to do this is to restart Peertube.
 
Method for the Docker case
 
This method works with the officially supported [Docker guide](https://docs.joinpeertube.org/install/docker) from PeerTube.
 
First, ensure you create a DNS entry for `room.your_instance.tld`, which points to your server. You can use a CNAME entry (or an A entry and a AAAA entry). This is necessary for Let's Encrypt to validate the domain for certificate generation.
 
Enter the directory where your `docker-compose.yml` file exists.
 
Open a shell in the certbot container:
 
docker exec -it certbot /bin/sh
 
Run certbot:
 
certbot
 
You will be presented with a series of prompts. Enter `2` for the authentication type:
 
How would you like to authenticate with the ACME CA?
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
 

Chargement…

Avatar de l’utilisateur Aucun

Chaîne mise à jour dans le dépôt
#!/bin/sh
/var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosodyAppImage/squashfs-root/AppRun prosodyctl \
--root \
--config /var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosody/prosody.cfg.lua \
cert import \
room.your_instance.tld your_instance.tld /etc/letsencrypt/live
 
Il y a un an
Parcourir toutes les modifications de chaînes

Glossaire

Anglais Chinois (sinogrammes traditionnels)
import 匯入 PeerTube
live 直播 PeerTube
LIVE 直播 PeerTube
plugin 外掛程式 PeerTube

Informations sur la chaîne

Description de la chaîne source
type: Fenced code block (bash)
Drapeaux
no-wrap
Emplacement de la chaîne source
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Âge de la chaîne
Il y a un an
Date de dernière mise à jour
Il y a 2 mois
Âge de la chaîne source
Il y a un an
Fichier de traduction
support/documentation/po/livechat.zh-Hant.po, chaîne 260