Quitter le mode Zen
278
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Enter the directory where the PeerTube webserver serves requests for Let's Encrypt, `/var/www/certbot`:
0/1030 · 103
279
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
Input the webroot for <room.your_instance.tld>: (Enter 'c' to cancel): /var/www/certbot
0/880 · 88
280
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
You should see output like the following:
0/410 · 41
281
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/room.your_instance.tld/fullchain.pem
Key is saved at: /etc/letsencrypt/live/room.your_instance.tld/privkey.pem
0/2010 · 201
282
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Run the below command inside the certbot container to give read access to the new certs and private keys to the peertube group. *Note*: This will also make the files readable to the group with id 999 on the host system. Check the groups on your system to assess this as a risk before running this command.
0/3070 · 307
283
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
chown -R root:999 /etc/letsencrypt/live; \
chmod 750 /etc/letsencrypt/live; \
chown -R root:999 /etc/letsencrypt/archive; \
chmod 750 /etc/letsencrypt/archive; \
find /etc/letsencrypt/ -name 'privkey*' -exec chmod 0640 {} \;
0/2250 · 225
284
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Exit the certbot container:
0/270 · 27
285
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
exit
0/100 · 5
286
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Modify your `docker-compose.yml` file, changing the `entrypoint` line under the `certbot` service to the following. This is the same as the above, but to be automatically executed after every certificate renewal.
0/2130 · 213
287
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
entrypoint: /bin/sh -c "trap exit TERM; while :; do certbot renew --webroot -w /var/www/certbot; chown -R root:999 /etc/letsencrypt/live; chmod 750 /etc/letsencrypt/live; chown -R root:999 /etc/letsencrypt/archive; chmod 750 /etc/letsencrypt/archive; find /etc/letsencrypt/ -name 'privkey*' -exec chmod 0640 {} +; sleep 12h & wait $${!}; done;"
0/3470 · 347
288
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Continuing to modify `docker-compose.yml`, add the certbot certificate volume into the peertube container. It should look something like this:
0/1430 · 143
289
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
volumes:
- ./docker-volume/certbot/conf:/etc/letsencrypt
0/630 · 63
290
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Restart your services:
0/220 · 22
291
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
docker-compose down; docker-comopse up -d
0/420 · 42
292
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
In the livechat plugin settings from your PeerTube administration settings, set the certificate directory to the following:
0/1230 · 123
293
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
/etc/letsencrypt/live
0/220 · 22
294
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Save the plugin settings and verify Prosody can see the certificates:
0/690 · 69
295
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
docker-compose exec -u peertube \
peertube \
/data/plugins/data/peertube-plugin-livechat/prosodyAppImage/squashfs-root/AppRun \
prosodyctl \
--config /data/plugins/data/peertube-plugin-livechat/prosody/prosody.cfg.lua \
check certs
0/2420 · 242
296
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md • build/documentation/pot_in/documentation/admin/external_auth.md • support/documentation/content/en/documentation/installation/troubleshooting.md
Anglais type: Yaml Front Matter Hash Value: title
Troubleshooting
0/150 · 15
297
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
If you can't make it work, you can use the diagnostic tool (there is a button on top of the plugin settings page), and take a close look on the «Prosody check» section.
0/1680 · 168