Installation de Peertube sur Debian 10 avec Apache

Mise en place

Mise en place des pre-requis

Il nous faut du nodejs, du yarn, du redis et du postgresql

Copy to Clipboard

Création d'un utilisateur spécifique

peertube va fonctionner en local sur le port 9000 (par défaut) et avec un utilisateur dédié.

Copy to Clipboard

Création de la bdd

Il faut créer une base de donnée postgresql pour l'application. NB ne pas oublier en prod de rajouter un backup de la base de données.

Copy to Clipboard

Création des répertoires

Copy to Clipboard

Téléchargement de la dernière version

Copy to Clipboard

Installation

Il suffit maintenant de lancer l'installation de peertube

Copy to Clipboard

Configuration et démarrage

Configuration

Le fichier de configuration est $HOME/config/production.yaml

Adapter la configuration

Copy to Clipboard

...
webserver:
  https: true
  hostname: 'ppertube.aukfood.net'
  port: 443
...
database:
  hostname: 'localhost'
  port: 5432
  suffix: ''
  username: 'peertube'
  password: 'peertube'
...
storage:
  tmp: '/var/www/peertube.aukfood.net/storage/tmp/' # Used to download data (imports etc), store uploaded files before processing...
  avatars: '/var/www/peertube.aukfood.net/storage/avatars/'
  videos: '/var/www/peertube.aukfood.net/storage/videos/'
  streaming_playlists: '/var/www/peertube.aukfood.net/storage/streaming-playlists/'
  redundancy: '/var/www/peertube.aukfood.net/storage/videos/'
  logs: '/var/www/peertube.aukfood.net/storage/logs/'
  previews: '/var/www/peertube.aukfood.net/storage/previews/'
  thumbnails: '/var/www/peertube.aukfood.net/storage/thumbnails/'
  torrents: '/var/www/peertube.aukfood.net/storage/torrents/'
  captions: '/var/www/peertube.aukfood.net/storage/captions/'
  cache: '/var/www/peertube.aukfood.net/storage/cache/'
  plugins: '/var/www/peertube.aukfood.net/storage/plugins/'
...
instance:
  name: 'PeerTube AukFood'
  short_description: 'PeerTube, a federated (ActivityPub) video streaming platform using P2P (BitTorrent) directly in the web browser with WebTorrent and Angular.'
  description: 'Peertube AukFood, nos vidéos à nous' # Support markdown

Un peu d'optimisation sysctl :

Copy to Clipboard

Démarrage

Il faut mettre en place les scripts pour le démarrage de peertube.

Modifier le fichier /etc/systemd/system/peertube.service en fonctione de votre installation.

Copy to Clipboard

Mot de passe admin

Il faut générer un mot de passe admin (root par défaut)

Copy to Clipboard

Proxy Apache

En frontal on met en place un proxy Apache et un certificat SSL Let's Encrypt

Installation d'Apache et des modules nécessaires

Copy to Clipboard

Rajouter l'utilisateur www-data dans le groupe peertube ça peut servir 🙂

Vhost Apache fichier etc/apache.conf

Copy to Clipboard

<VirtualHost *:80>
   ServerName peertube.aukfood.net
   Redirect Permanent / https://peertube.aukfood.net/
</VirtualHost>
<VirtualHost *:443>
        ServerName peertube.aukfood.net

LogLevel debug
  	ErrorLog "|/usr/bin/rotatelogs -lc /var/www/peertube.aukfood.net/var/log/apache2/error.%Y.%m.%d 86400"
  	CustomLog "|/usr/bin/rotatelogs -lc /var/www/peertube.aukfood.net/var/log/apache2/access.%Y.%m.%d 86400" combined

SSLEngine on
        SSLCertificateFile /etc/letsencrypt/live/peertube.aukfood.net/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/peertube.aukfood.net/privkey.pem

# HSTS (mod_headers is required) (63072000 seconds = 2 years) (only activate it knowingly)
        #Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
        
        Header always set X-Content-Type-Options nosniff
        Header always set X-Robots-Tag none
        Header always set X-XSS-Protection "1; mode=block"

# Activate http/2
  	Protocols h2 h2c http/1.1

H2Push          on
  	H2PushPriority  *                       after
  	H2PushPriority  text/css                before
  	H2PushPriority  image/jpeg              after   32
  	H2PushPriority  image/png               after   32
  	H2PushPriority  application/javascript  interleaved

# Hard limit, PeerTube does not support videos > 4GB
        LimitRequestBody 4294967294

# Set caching on assets for 1 year
        <FilesMatch ^/client/(.*\.(js|css|woff2|otf|ttf|woff|eot))$>
                Header append Cache-Control "public, max-age=31536000, immutable"
        </FilesMatch>
        AliasMatch ^/client/(.*\.(js|css|woff2|otf|ttf|woff|eot))$ /var/www/peertube.aukfood.net/peertube-latest/client/dist/$1

# Set caching on image files for 1 year
        <FilesMatch ^/static/(thumbnails|avatars)/(.*)$>
                Header append Cache-Control "public, max-age=31536000, immutable"
        </FilesMatch>
        AliasMatch ^/static/(thumbnails|avatars)/(.*)$ /var/www/peertube.aukfood.net/storage/$1/$2

# Bypass PeerTube webseed route for better performances
        Alias /static/webseed /var/www/peertube.aukfood.net/storage/videos
        <Location /static/webseed>
                # Clients usually have 4 simultaneous webseed connections, so the real limit is 3MB/s per client
                SetOutputFilter RATE_LIMIT
                SetEnv rate-limit 800

SetEnvIf Request_Method "GET" GETMETH=1

Header set Access-Control-Allow-Origin "*" env=GETMETH
                Header set Access-Control-Allow-Headers "Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type" env=GETMETH
                Header set Access-Control-Allow-Methods "GET, OPTIONS" env=GETMETH
                Header set toto "foo" env=GETMETH
                SetEnvIf GETMETH "1" dontlog

SetEnvIf Request_Method "OPTIONS" OPTIONSMETH=1

Header set Access-Control-Allow-Origin "*" env=OPTIONSMETH
                Header set Access-Control-Allow-Headers "Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type" env=OPTIONSMETH
                Header set Access-Control-Allow-Methods "GET, OPTIONS" env=OPTIONSMETH
                Header set Access-Control-Max-Age "1000" env=OPTIONSMETH
                Header set Content-Type "text/plain charset=UTF-8" env=OPTIONSMETH
                Header set Content-Length "0" env=OPTIONSMETH
        </Location>

<Location /videos/embed>
                Header unset X-Frame-Options
        </Location>

ProxyPreserveHost On
        ProxyRequests On
        ProxyTimeout 600

# Websocket tracker
        RewriteEngine On
        RewriteCond %{HTTP:Upgrade} websocket [NC]
        RewriteRule /(.*) ws://127.0.0.1:9000/$1 [P,L]

<Location />
                ProxyPass http://127.0.0.1:9000/
        </Location>
</VirtualHost>
# Security configuration
SSLCipherSuite                    EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
SSLProtocol                       All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
SSLHonorCipherOrder               on
# Requires Apache >= 2.4
SSLCompression                    off
# To use stapling, we have to enable it globally
SSLStaplingCache                  "shmcb:logs/stapling-cache(150000)"
# OCSP Stapling requires Apache >= 2.3.3
SSLUseStapling                    on
SSLStaplingResponderTimeout       5
SSLStaplingReturnResponderErrors  off
SSLSessionTickets                 off # Requires Apache >= 2.4.11

Pour finir il suffit de créer le certificat SSL et activer le vhost Apache. Et ça tourne ...

Je me permet de citer ici les sources qui m'ont permis de mettre en place cette installation :

https://blog.zergy.net/index.php?article27/installer-peertube-sur-debian-9-stretch

https://docs.joinpeertube.org/#/

Peertube sur Debian 10 avec Apache

Mise en place

Mise en place des pre-requis

Création d'un utilisateur spécifique

Création de la bdd

Création des répertoires

Téléchargement de la dernière version

Installation

Configuration et démarrage

Configuration

Démarrage

Mot de passe admin

Proxy Apache

Installation d'Apache et des modules nécessaires

Share This Story, Choose Your Platform!

Articles similaires

Peertube dockerisé avec Traefik 2