certbot
This commit is contained in:
parent
f6463f8702
commit
9cd0d2b38e
|
@ -138,12 +138,12 @@ The following ports need to be open on the firewall:
|
||||||
|
|
||||||
.. code-block:: cfg
|
.. code-block:: cfg
|
||||||
|
|
||||||
80/tcp
|
80/tcp Web http
|
||||||
443/tcp
|
443/tcp Web https
|
||||||
10000/udp
|
10000/udp Audio/video stream over UDP
|
||||||
22/tcp
|
22/tcp SSH (best use alternate port)
|
||||||
3478/udp
|
3478/udp STUN
|
||||||
5349/tcp
|
5349/tcp Audio/video stream over TCP
|
||||||
|
|
||||||
|
|
||||||
Installation
|
Installation
|
||||||
|
@ -153,7 +153,7 @@ Install software from Debian, Jitsi, and Prosody repos.
|
||||||
.. code-block:: sh
|
.. code-block:: sh
|
||||||
|
|
||||||
sudo apt install apt-transport-https curl wget gnupg2 lua5.2
|
sudo apt install apt-transport-https curl wget gnupg2 lua5.2
|
||||||
sudo apt install nginx-full
|
sudo apt install nginx-full python3-certbot-nginx
|
||||||
|
|
||||||
If IPv6 is disabled, nginx install will fail. To fix it, after the above
|
If IPv6 is disabled, nginx install will fail. To fix it, after the above
|
||||||
command runs, edit /etc/nginx/sites-enabled/default and disable this IPv6 line
|
command runs, edit /etc/nginx/sites-enabled/default and disable this IPv6 line
|
||||||
|
@ -167,6 +167,8 @@ Then reinstall and it will be happy:
|
||||||
|
|
||||||
.. code-block:: sh
|
.. code-block:: sh
|
||||||
|
|
||||||
|
sudo apt install nginx-full python3-certbot-nginx
|
||||||
|
|
||||||
Add Prosody and Jitsi repos:
|
Add Prosody and Jitsi repos:
|
||||||
|
|
||||||
.. code-block:: sh
|
.. code-block:: sh
|
||||||
|
@ -174,13 +176,13 @@ Add Prosody and Jitsi repos:
|
||||||
sudo curl -sL https://prosody.im/files/prosody-debian-packages.key \
|
sudo curl -sL https://prosody.im/files/prosody-debian-packages.key \
|
||||||
-o /etc/apt/keyrings/prosody-debian-packages.key
|
-o /etc/apt/keyrings/prosody-debian-packages.key
|
||||||
|
|
||||||
|
sudo curl -sL https://download.jitsi.org/jitsi-key.gpg.key | \
|
||||||
|
sudo sh -c 'gpg --dearmor > /usr/share/keyrings/jitsi-keyring.gpg'
|
||||||
|
|
||||||
echo "deb [signed-by=/etc/apt/keyrings/prosody-debian-packages.key] \
|
echo "deb [signed-by=/etc/apt/keyrings/prosody-debian-packages.key] \
|
||||||
http://packages.prosody.im/debian $(lsb_release -sc) main" | \
|
http://packages.prosody.im/debian $(lsb_release -sc) main" | \
|
||||||
sudo tee /etc/apt/sources.list.d/prosody-debian-packages.list
|
sudo tee /etc/apt/sources.list.d/prosody-debian-packages.list
|
||||||
|
|
||||||
curl -sL https://download.jitsi.org/jitsi-key.gpg.key | \
|
|
||||||
sudo sh -c 'gpg --dearmor > /usr/share/keyrings/jitsi-keyring.gpg'
|
|
||||||
|
|
||||||
echo "deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg] \
|
echo "deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg] \
|
||||||
https://download.jitsi.org stable/" | \
|
https://download.jitsi.org stable/" | \
|
||||||
sudo tee /etc/apt/sources.list.d/jitsi-stable.list
|
sudo tee /etc/apt/sources.list.d/jitsi-stable.list
|
||||||
|
@ -188,10 +190,10 @@ Add Prosody and Jitsi repos:
|
||||||
sudo apt update
|
sudo apt update
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
Set up a certificate with certbot.
|
Set up a certificate with certbot.
|
||||||
|
|
||||||
.. code-block:: sh
|
.. code-block:: sh
|
||||||
|
|
||||||
echo
|
sudo certbot -d meet.libre.is
|
||||||
|
sudo systemctl restart nginx
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue