Quitter le mode Zen
271
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
You will be presented with a series of prompts. Enter `2` for the authentication type:
0/860 · 86
272
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
How would you like to authenticate with the ACME CA?
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
0/1270 · 127
273
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Enter the domain name `room.your_instance.tld`:
0/470 · 47
274
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
Please enter the domain name(s) you would like on your certificate (comma and/or space separated) (Enter 'c' to cancel): room.your_instance.tld
0/1440 · 144
275
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Enter the directory where the PeerTube webserver serves requests for Let's Encrypt, `/var/www/certbot`:
0/1030 · 103
276
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
Input the webroot for <room.your_instance.tld>: (Enter 'c' to cancel): /var/www/certbot
0/880 · 88
277
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
You should see output like the following:
0/410 · 41
278
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/room.your_instance.tld/fullchain.pem
Key is saved at: /etc/letsencrypt/live/room.your_instance.tld/privkey.pem
0/2010 · 201
279
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Run the below command inside the certbot container to give read access to the new certs and private keys to the peertube group. *Note*: This will also make the files readable to the group with id 999 on the host system. Check the groups on your system to assess this as a risk before running this command.
0/3070 · 307
280
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
chown -R root:999 /etc/letsencrypt/live; \
chmod 750 /etc/letsencrypt/live; \
chown -R root:999 /etc/letsencrypt/archive; \
chmod 750 /etc/letsencrypt/archive; \
find /etc/letsencrypt/ -name 'privkey*' -exec chmod 0640 {} \;
0/2250 · 225
281
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Exit the certbot container:
0/270 · 27
282
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
exit
0/100 · 5
283
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Modify your `docker-compose.yml` file, changing the `entrypoint` line under the `certbot` service to the following. This is the same as the above, but to be automatically executed after every certificate renewal.
0/2130 · 213
284
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
entrypoint: /bin/sh -c "trap exit TERM; while :; do certbot renew --webroot -w /var/www/certbot; chown -R root:999 /etc/letsencrypt/live; chmod 750 /etc/letsencrypt/live; chown -R root:999 /etc/letsencrypt/archive; chmod 750 /etc/letsencrypt/archive; find /etc/letsencrypt/ -name 'privkey*' -exec chmod 0640 {} +; sleep 12h & wait $${!}; done;"
0/3470 · 347
285
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Continuing to modify `docker-compose.yml`, add the certbot certificate volume into the peertube container. It should look something like this:
0/1430 · 143
286
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
volumes:
- ./docker-volume/certbot/conf:/etc/letsencrypt
0/630 · 63
287
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
Restart your services:
0/220 · 22
288
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (bash)
docker-compose down; docker-comopse up -d
0/420 · 42
289
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Plain text
In the livechat plugin settings from your PeerTube administration settings, set the certificate directory to the following:
0/1230 · 123
290
support/documentation/content/en/documentation/admin/advanced/xmpp_clients.md
Anglais type: Fenced code block (text)
/etc/letsencrypt/live
0/220 · 22