Quitter le mode Zen
268
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Open a shell in the certbot container:
0/380 · 38
269
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
docker exec -it certbot /bin/sh
0/320 · 32
270
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Run certbot:
0/120 · 12
271
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
certbot
0/100 · 8
272
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
You will be presented with a series of prompts. Enter `2` for the authentication type:
0/860 · 86
273
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
How would you like to authenticate with the ACME CA?
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
0/1270 · 127
274
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Enter the domain name `room.your_instance.tld`:
0/470 · 47
275
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
Please enter the domain name(s) you would like on your certificate (comma and/or space separated) (Enter 'c' to cancel): room.your_instance.tld
0/1440 · 144
276
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Enter the directory where the PeerTube webserver serves requests for Let's Encrypt, `/var/www/certbot`:
0/1030 · 103
277
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
Input the webroot for <room.your_instance.tld>: (Enter 'c' to cancel): /var/www/certbot
0/880 · 88
278
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
You should see output like the following:
0/410 · 41
279
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/room.your_instance.tld/fullchain.pem
Key is saved at: /etc/letsencrypt/live/room.your_instance.tld/privkey.pem
0/2010 · 201
280
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Run the below command inside the certbot container to give read access to the new certs and private keys to the peertube group. *Note*: This will also make the files readable to the group with id 999 on the host system. Check the groups on your system to assess this as a risk before running this command.
0/3070 · 307
281
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
chown -R root:999 /etc/letsencrypt/live; \
chmod 750 /etc/letsencrypt/live; \
chown -R root:999 /etc/letsencrypt/archive; \
chmod 750 /etc/letsencrypt/archive; \
find /etc/letsencrypt/ -name 'privkey*' -exec chmod 0640 {} \;
0/2250 · 225
282
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Exit the certbot container:
0/270 · 27
283
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
exit
0/100 · 5
284
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Modify your `docker-compose.yml` file, changing the `entrypoint` line under the `certbot` service to the following. This is the same as the above, but to be automatically executed after every certificate renewal.
0/2130 · 213
285
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
entrypoint: /bin/sh -c "trap exit TERM; while :; do certbot renew --webroot -w /var/www/certbot; chown -R root:999 /etc/letsencrypt/live; chmod 750 /etc/letsencrypt/live; chown -R root:999 /etc/letsencrypt/archive; chmod 750 /etc/letsencrypt/archive; find /etc/letsencrypt/ -name 'privkey*' -exec chmod 0640 {} +; sleep 12h & wait $${!}; done;"
0/3470 · 347
286
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Continuing to modify `docker-compose.yml`, add the certbot certificate volume into the peertube container. It should look something like this:
0/1430 · 143
287
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
volumes:
- ./docker-volume/certbot/conf:/etc/letsencrypt
0/630 · 63