Quitter le mode Zen
249
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
So start by setting up a DNS entry for `room.your_instance.tld`, which points to your server. You can use a CNAME entry (or an A entry and a AAAA entry).
0/1540 · 154
250
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Next, we'll use nginx (already installed for your Peertube) to generate the certbot certificate. We will create a new site. In the file `/etc/nginx/site-available/room.peertube`, add:
0/1840 · 184
251
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (nginx)
server {
listen 80;
listen [::]:80;
server_name room.your_instance.tld;

location /.well-known/acme-challenge/ {
default_type "text/plain";
root /var/www/certbot;
}
location / { return 301 https://your_instance.tld; }
}
0/2400 · 240
252
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Then enable the site:
0/210 · 21
253
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
ln -s /etc/nginx/sites-available/room.peertube /etc/nginx/sites-enabled/
systemc reload nginx
0/940 · 94
254
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Then we prepare the folder in which we will later import the certificates. We assume here that you already have the plugin active. We will create the following folder (if it doesn't already exist), with the user `peertube` to make sure there are no permissions issues:
0/2690 · 269
255
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
sudo -u peertube mkdir /var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosody/certs
0/1010 · 101
256
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Now you have to configure this folder in the plugin settings, for the parameter "Certificate folders". It's important to do this now, otherwise the certificate import script will put the certificates in the wrong folder.
0/2210 · 221
257
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
We will configure certbot to import the generated certificates into the Prosody folder. We can use the ProsodyCtl utility packaged in the plugin.
0/1460 · 146
258
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Note: for it to be available, the plugin must have been started at least once.
0/780 · 78
259
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
We will create a file `/etc/letsencrypt/renewal-hooks/deploy/prosody.sh` containing:
0/840 · 84
260
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
#!/bin/sh
/var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosodyAppImage/squashfs-root/AppRun prosodyctl \
--root \
--config /var/www/peertube/storage/plugins/data/peertube-plugin-livechat/prosody/prosody.cfg.lua \
cert import \
room.your_instance.tld your_instance.tld /etc/letsencrypt/live
0/3170 · 317
261
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Then we ask to generate the certificate:
0/400 · 40
262
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
certbot -d room.videos.john-livingston.fr
0/420 · 42
263
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
If certbot offers you several methods to generate the certificate, choose "nginx".
0/820 · 82
264
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Normally you should now find the certificates in the configured folder.
0/710 · 71
265
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Note: the first time you do this, you will have to reload Prosody. The easiest way to do this is to restart Peertube.
0/1170 · 117
266
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Title ####
Method for the Docker case
0/260 · 26
267
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
This method works with the officially supported [Docker guide](https://docs.joinpeertube.org/install/docker) from PeerTube.
0/1230 · 123
268
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
First, ensure you create a DNS entry for `room.your_instance.tld`, which points to your server. You can use a CNAME entry (or an A entry and a AAAA entry). This is necessary for Let's Encrypt to validate the domain for certificate generation.
0/2440 · 244