Run the below command inside the certbot container to give read access to the new certs and private keys to the peertube group.*Note*: This will also make the files readable to the group with id 999 on the host system.Check the groups on your system to assess this as a risk before running this command.
Modify your `docker-compose.yml` file, changing the `entrypoint` line under the `certbot` service to the following.This is the same as the above, but to be automatically executed after every certificate renewal.
You can enable <a href="https://modules.prosody.im/mod_firewall" target="_blank">mod_firewall</a> on your Prosody server. For more information, please check <a href="https://livingston.frama.io/peertube-plugin-livechat/documentation/admin/mod_firewall/" target="_blank">the documentation</a>.
Here you can configure Prosody <a href="https://modules.prosody.im/mod_firewall" target="_blank">mod_firewall</a> module. You can create multiple configuration files bellow, and change their order. Don't hesitate to share your configurations with the community (for example by adding some examples in the plugin documentation).