certbot

docs/_source/meet-libre-is.rst

@@ -138,12 +138,12 @@ The following ports need to be open on the firewall:
 
 .. code-block:: cfg
 
-  80/tcp
-  443/tcp
-  10000/udp
-  22/tcp
-  3478/udp
-  5349/tcp
+  80/tcp    Web http
+  443/tcp   Web https
+  10000/udp Audio/video stream over UDP
+  22/tcp    SSH (best use alternate port)
+  3478/udp  STUN
+  5349/tcp  Audio/video stream over TCP
 
 
 Installation
@@ -153,7 +153,7 @@ Install software from Debian, Jitsi, and Prosody repos.
 .. code-block:: sh
 
   sudo apt install apt-transport-https curl wget gnupg2 lua5.2
-  sudo apt install nginx-full
+  sudo apt install nginx-full python3-certbot-nginx
 
 If IPv6 is disabled, nginx install will fail. To fix it, after the above
 command runs, edit /etc/nginx/sites-enabled/default and disable this IPv6 line
@@ -167,6 +167,8 @@ Then reinstall and it will be happy:
 
 .. code-block:: sh
 
+  sudo apt install nginx-full python3-certbot-nginx
+
 Add Prosody and Jitsi repos:
 
 .. code-block:: sh
@@ -174,13 +176,13 @@ Add Prosody and Jitsi repos:
   sudo curl -sL https://prosody.im/files/prosody-debian-packages.key \
     -o /etc/apt/keyrings/prosody-debian-packages.key
 
+  sudo curl -sL https://download.jitsi.org/jitsi-key.gpg.key | \
+    sudo sh -c 'gpg --dearmor > /usr/share/keyrings/jitsi-keyring.gpg'
+
   echo "deb [signed-by=/etc/apt/keyrings/prosody-debian-packages.key] \
     http://packages.prosody.im/debian $(lsb_release -sc) main" | \
     sudo tee /etc/apt/sources.list.d/prosody-debian-packages.list
 
-  curl -sL https://download.jitsi.org/jitsi-key.gpg.key | \
-    sudo sh -c 'gpg --dearmor > /usr/share/keyrings/jitsi-keyring.gpg'
-
   echo "deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg] \
     https://download.jitsi.org stable/" | \
     sudo tee /etc/apt/sources.list.d/jitsi-stable.list
@@ -188,10 +190,10 @@ Add Prosody and Jitsi repos:
   sudo apt update
 
 
-
 Set up a certificate with certbot.
 
 .. code-block:: sh
 
-  echo
+  sudo certbot -d meet.libre.is
+  sudo systemctl restart nginx