diff --git a/doc/EN/apps.org b/doc/EN/apps.org index 478bbd33..5a5a4f53 100644 --- a/doc/EN/apps.org +++ b/doc/EN/apps.org @@ -115,6 +115,10 @@ The popular VoIP and text chat system. Say goodbye to old-fashioned telephony co Store files on your server and sync them with laptops or mobile devices. Includes many plugins including videoconferencing and collaborative document editing. [[./app_nextcloud.html][How to use it]] +* PeerTube +Peer-to-peer video hosting. Similar to Mediagoblin, but the P2P aspect better enables the streaming load to be shared across servers. + +[[./app_peertube.html][How to use it]] * PI-Hole The black hole for web adverts. Block adverts at the domain name level within your local network. It can significantly reduce bandwidth, speed up page load times and protect your systems from being tracked by spyware. diff --git a/doc/EN/armbian.org b/doc/EN/armbian.org index e6f332d6..248e079b 100644 --- a/doc/EN/armbian.org +++ b/doc/EN/armbian.org @@ -15,6 +15,10 @@

Installing on Armbian

#+end_export +#+begin_quote +"/we are the music makers, we are the dreamers of dreams. cyberpunks and pirates. chaotic spectres hauting cyberspace. engineers, artists, hackers./" +#+end_quote + If you have a single board ARM computer which isn't one of the supported ones then you can probably still install Freedombone onto it if it has a [[https://www.armbian.com/download/][Debian Stretch Armbian image]] available for it. Download the Armbian image for your board. It must be version 9 (Stretch), otherwise it won't work. Extract the image from its archive, then copy it to a microSD card: diff --git a/img/peertube.jpg b/img/peertube.jpg new file mode 100644 index 00000000..ea25f89a Binary files /dev/null and b/img/peertube.jpg differ diff --git a/src/freedombone-app-peertube b/src/freedombone-app-peertube new file mode 100755 index 00000000..3e85b891 --- /dev/null +++ b/src/freedombone-app-peertube @@ -0,0 +1,655 @@ +#!/bin/bash +# +# .---. . . +# | | | +# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-. +# | | (.-' (.-' ( | ( )| | | | )( )| | (.-' +# ' ' --' --' -' - -' ' ' -' -' -' ' - --' +# +# Freedom in the Cloud +# +# PeerTube server +# +# License +# ======= +# +# Copyright (C) 2017 Bob Mottram +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU Affero General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU Affero General Public License for more details. +# +# You should have received a copy of the GNU Affero General Public License +# along with this program. If not, see . + +VARIANTS="full full-vim media" + +IN_DEFAULT_INSTALL=0 +SHOW_ON_ABOUT=1 + +PEERTUBE_DOMAIN_NAME= +PEERTUBE_CODE= +PEERTUBE_REPO="https://github.com/Chocobozzz/PeerTube" +PEERTUBE_COMMIT='fef2c7164e025b12a64185dbab058ef4129733c6' +PEERTUBE_ONION_PORT=8136 +PEERTUBE_PORT=9004 +PEERTUBE_DIR=/etc/peertube + +peertube_variables=(PEERTUBE_DOMAIN_NAME + PEERTUBE_CODE + PEERTUBE_ADMIN_PASSWORD + ONION_ONLY + DDNS_PROVIDER + MY_USERNAME + MY_EMAIL_ADDRESS) + +function peertube_create_database { + if [ -f $IMAGE_PASSWORD_FILE ]; then + PEERTUBE_ADMIN_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)" + else + if [ ! $PEERTUBE_ADMIN_PASSWORD ]; then + PEERTUBE_ADMIN_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})" + fi + fi + if [ ! $PEERTUBE_ADMIN_PASSWORD ]; then + return + fi + + systemctl restart postgresql + run_system_query_postgresql "CREATE USER peertube WITH PASSWORD '$PEERTUBE_ADMIN_PASSWORD';" + run_system_query_postgresql "CREATE DATABASE peertube OWNER peertube;" + run_system_query_postgresql "GRANT ALL PRIVILEGES ON DATABASE peertube to peertube;" + run_system_query_postgresql "set statement_timeout to 40000;" +} + +function logging_on_peertube { + echo -n '' +} + +function logging_off_peertube { + echo -n '' +} + +function remove_user_peertube { + remove_username="$1" +} + +function add_user_peertube { + if [[ $(app_is_installed peertube) == "0" ]]; then + echo '0' + return + fi + + new_username="$1" + new_user_password="$2" + + echo '0' +} + +function install_interactive_peertube { + if [ ! $ONION_ONLY ]; then + ONION_ONLY='no' + fi + + if [[ $ONION_ONLY != "no" ]]; then + PEERTUBE_DOMAIN_NAME='peertube.local' + write_config_param "PEERTUBE_DOMAIN_NAME" "$PEERTUBE_DOMAIN_NAME" + else + function_check interactive_site_details + interactive_site_details "peertube" "PEERTUBE_DOMAIN_NAME" "PEERTUBE_CODE" + fi + APP_INSTALLED=1 +} + +function peertube_set_admin_email { + read_config_param $MY_EMAIL_ADDRESS + data=$(tempfile 2>/dev/null) + trap "rm -f $data" 0 1 2 5 15 + dialog --title $"Set PeerTube administrator email address" \ + --backtitle $"Freedombone Control Panel" \ + --inputbox $"Admin email address" 8 75 "$MY_EMAIL_ADDRESS" 2>$data + sel=$? + case $sel in + 0) peertube_email=$(<$data) + if [[ "$peertube_email" != *' '* && "$peertube_email" != *','* && "$peertube_email" != *';'* && "$peertube_email" == *'@'* && "$peertube_email" == *'.'* ]]; then + if [ ${#peertube_email} -gt 8 ]; then + sed -i "s|email:.*|email: '${peertube_email}'|g" $PEERTUBE_DIR/config/production.yaml + systemctl restart peertube + dialog --title $"Set PeerTube administrator email address" \ + --msgbox $"Set to $peertube_email" 6 75 + fi + fi + ;; + esac + rm $data +} + +function peertube_disable_signups { + dialog --title $"Disable PeerTube signups" \ + --backtitle $"Freedombone Control Panel" \ + --yesno $"\nDo you wish to disable further PeerTube signups?" 8 75 + sel=$? + case $sel in + 0) sed "0,/RE/s/enabled:.*/enabled: false/" $PEERTUBE_DIR/config/production.yaml;; + 1) sed "0,/RE/s/enabled:.*/enabled: true/" $PEERTUBE_DIR/config/production.yaml;; + 255) return;; + esac + + systemctl restart peertube +} + +function configure_interactive_peertube { + while true + do + data=$(tempfile 2>/dev/null) + trap "rm -f $data" 0 1 2 5 15 + dialog --backtitle $"Freedombone Control Panel" \ + --title $"PeerTube" \ + --radiolist $"Choose an operation:" 10 70 4 \ + 1 $"Set administrator email address" off \ + 2 $"Disable or enable signups" off \ + 3 $"Exit" on 2> $data + sel=$? + case $sel in + 1) break;; + 255) break;; + esac + case $(cat $data) in + 1) peertube_set_admin_email;; + 2) peertube_disable_signups;; + 3) break;; + esac + done +} + +function change_password_peertube { + PEERTUBE_USERNAME="$1" + PEERTUBE_PASSWORD="$2" + if [ ${#PEERTUBE_PASSWORD} -lt 8 ]; then + echo $'Peertube password is too short' + return + fi + #${PROJECT_NAME}-pass -u $PEERTUBE_USERNAME -a peertube -p "$PEERTUBE_PASSWORD" +} + +function reconfigure_peertube { + echo -n '' +} + +function upgrade_peertube { + CURR_PEERTUBE_COMMIT=$(get_completion_param "peertube commit") + if [[ "$CURR_PEERTUBE_COMMIT" == "$PEERTUBE_COMMIT" ]]; then + return + fi + + read_config_param PEERTUBE_DOMAIN_NAME + systemctl stop peertube + cd $PEERTUBE_DIR + + function_check set_repo_commit + set_repo_commit $PEERTUBE_DIR "peertube commit" "$PEERTUBE_COMMIT" $PEERTUBE_REPO + + npm run upgrade-peertube + chown -R peertube:peertube $PEERTUBE_DIR + systemctl start peertube +} + +function backup_local_peertube { + PEERTUBE_DOMAIN_NAME='peertube.local' + if grep -q "peertube domain" $COMPLETION_FILE; then + PEERTUBE_DOMAIN_NAME=$(get_completion_param "peertube domain") + fi + + systemctl stop peertube + USE_POSTGRESQL=1 + function_check backup_database_to_usb + backup_database_to_usb peertube + systemctl start peertube + + peertube_path=$PEERTUBE_DIR/videos + if [ -d $peertube_path ]; then + suspend_site ${PEERTUBE_DOMAIN_NAME} + systemctl stop peertube + backup_directory_to_usb $peertube_path peertubevideos + systemctl start peertube + restart_site + fi +} + +function restore_local_peertube { + PEERTUBE_DOMAIN_NAME='peertube.local' + if grep -q "peertube domain" $COMPLETION_FILE; then + PEERTUBE_DOMAIN_NAME=$(get_completion_param "peertube domain") + fi + if [ $PEERTUBE_DOMAIN_NAME ]; then + suspend_site ${PEERTUBE_DOMAIN_NAME} + systemctl stop peertube + + USE_POSTGRESQL=1 + restore_database peertube + + temp_restore_dir=/root/temppeertubevideos + function_check restore_directory_from_usb + restore_directory_from_usb $temp_restore_dir peertubevideos + if [ -d $temp_restore_dir ]; then + if [ -d $temp_restore_dir$PEERTUBE_DIR/videos ]; then + cp -r $temp_restore_dir$PEERTUBE_DIR/videos/* $PEERTUBE_DIR/videos/ + else + cp -r $temp_restore_dir/* $PEERTUBE_DIR/videos/ + fi + chown -R peertube:peertube $PEERTUBE_DIR + rm -rf $temp_restore_dir + fi + + systemctl start peertube + restart_site + fi +} + +function backup_remote_peertube { + PEERTUBE_DOMAIN_NAME='peertube.local' + if grep -q "peertube domain" $COMPLETION_FILE; then + PEERTUBE_DOMAIN_NAME=$(get_completion_param "peertube domain") + fi + + systemctl stop peertube + USE_POSTGRESQL=1 + function_check backup_database_to_friend + backup_database_to_friend peertube + systemctl start peertube + + temp_backup_dir=$PEERTUBE_DIR/videos + if [ -d $temp_backup_dir ]; then + systemctl stop peertube + suspend_site ${PEERTUBE_DOMAIN_NAME} + backup_directory_to_friend $temp_backup_dir peertubevideos + restart_site + systemctl start peertube + else + echo $"Peertube domain specified but not found in $temp_backup_dir" + exit 6383523 + fi +} + +function restore_remote_peertube { + PEERTUBE_DOMAIN_NAME='peertube.local' + if grep -q "peertube domain" $COMPLETION_FILE; then + PEERTUBE_DOMAIN_NAME=$(get_completion_param "peertube domain") + fi + suspend_site ${PEERTUBE_DOMAIN_NAME} + + systemctl stop peertube + + USE_POSTGRESQL=1 + function_check restore_database_from_friend + restore_database_from_friend peertube + + temp_restore_dir=/root/temppeertubevideos + function_check restore_directory_from_friend + restore_directory_from_friend $temp_restore_dir peertubevideos + if [ -d $temp_restore_dir ]; then + if [ -d $temp_restore_dir$PEERTUBE_DIR/videos ]; then + cp -r $temp_restore_dir$PEERTUBE_DIR/videos/* $PEERTUBE_DIR/videos/ + else + cp -r $temp_restore_dir/* $PEERTUBE_DIR/videos/ + fi + chown -R peertube: $PEERTUBE_DIR + rm -rf $temp_restore_dir + fi + + systemctl start peertube + restart_site +} + +function remove_peertube { + if [ ${#PEERTUBE_DOMAIN_NAME} -eq 0 ]; then + return + fi + + systemctl stop peertube + systemctl disable peertube + rm /etc/systemd/system/peertube.service + systemctl daemon-reload + + function_check remove_nodejs + remove_nodejs peertube + + read_config_param "PEERTUBE_DOMAIN_NAME" + nginx_dissite $PEERTUBE_DOMAIN_NAME + remove_certs ${PEERTUBE_DOMAIN_NAME} + if [ -f /etc/nginx/sites-available/$PEERTUBE_DOMAIN_NAME ]; then + rm -f /etc/nginx/sites-available/$PEERTUBE_DOMAIN_NAME + fi + if [ -d /var/www/$PEERTUBE_DOMAIN_NAME ]; then + rm -rf /var/www/$PEERTUBE_DOMAIN_NAME + fi + remove_config_param PEERTUBE_DOMAIN_NAME + remove_config_param PEERTUBE_CODE + function_check remove_onion_service + remove_onion_service peertube ${PEERTUBE_ONION_PORT} + remove_completion_param "install_peertube" + sed -i '/peertube/d' $COMPLETION_FILE + + function_check drop_database_postgresql + drop_database_postgresql peertube + + remove_postgresql_user peertube + groupdel -f peertube + userdel -r peertube + + if [ -d $PEERTUBE_DIR ]; then + rm -rf $PEERTUBE_DIR + fi + + function_check remove_ddns_domain + remove_ddns_domain $PEERTUBE_DOMAIN_NAME +} + +function peertube_setup_web { + peertube_nginx_file=/etc/nginx/sites-available/$PEERTUBE_DOMAIN_NAME + + if [[ $ONION_ONLY == "no" ]]; then + echo 'server {' > $peertube_nginx_file + echo ' listen 80;' >> $peertube_nginx_file + echo ' listen [::]:80;' >> $peertube_nginx_file + echo " server_name $PEERTUBE_DOMAIN_NAME;" >> $peertube_nginx_file + echo ' rewrite ^ https://$server_name$request_uri? permanent;' >> $peertube_nginx_file + echo '}' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo 'server {' >> $peertube_nginx_file + echo ' listen 443 ssl http2;' >> $peertube_nginx_file + echo ' listen [::]:443 ssl http2;' >> $peertube_nginx_file + echo " server_name $PEERTUBE_DOMAIN_NAME;" >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + function_check nginx_ssl + nginx_ssl $PEERTUBE_DOMAIN_NAME mobile + + function_check nginx_disable_sniffing + nginx_disable_sniffing $PEERTUBE_DOMAIN_NAME + + echo ' add_header Strict-Transport-Security max-age=15768000;' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo ' location / {' >> $peertube_nginx_file + echo " proxy_pass http://localhost:${PEERTUBE_PORT};" >> $peertube_nginx_file + echo ' proxy_set_header X-Real-IP $remote_addr;' >> $peertube_nginx_file + echo ' proxy_set_header Host $host;' >> $peertube_nginx_file + echo ' proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo ' # For the video upload' >> $peertube_nginx_file + echo ' client_max_body_size 2G;' >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo ' location /static/webseed {' >> $peertube_nginx_file + echo " if (\$request_method = 'OPTIONS') {" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Origin' '*';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Headers' 'Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Max-Age' 1728000;" >> $peertube_nginx_file + echo " add_header 'Content-Type' 'text/plain charset=UTF-8';" >> $peertube_nginx_file + echo " add_header 'Content-Length' 0;" >> $peertube_nginx_file + echo ' return 204;' >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo " if (\$request_method = 'GET') {" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Origin' '*';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Headers' 'Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';" >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo " alias $PEERTUBE_DIR/videos;" >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo ' # Websocket tracker' >> $peertube_nginx_file + echo ' location /tracker/socket {' >> $peertube_nginx_file + echo ' # Peers send a message to the tracker every 15 minutes' >> $peertube_nginx_file + echo ' # Dont close the websocket before this time' >> $peertube_nginx_file + echo ' proxy_read_timeout 1200s;' >> $peertube_nginx_file + echo ' proxy_set_header Upgrade $http_upgrade;' >> $peertube_nginx_file + echo ' proxy_set_header Connection "upgrade";' >> $peertube_nginx_file + echo ' proxy_http_version 1.1;' >> $peertube_nginx_file + echo ' proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;' >> $peertube_nginx_file + echo ' proxy_set_header Host $host;' >> $peertube_nginx_file + echo " proxy_pass http://localhost:${PEERTUBE_PORT};" >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '}' >> $peertube_nginx_file + else + echo -n '' > $peertube_nginx_file + fi + echo 'server {' >> $peertube_nginx_file + echo " listen 127.0.0.1:$PEERTUBE_ONION_PORT default_server;" >> $peertube_nginx_file + echo " server_name $PEERTUBE_ONION_HOSTNAME;" >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo ' location / {' >> $peertube_nginx_file + echo " proxy_pass http://localhost:${PEERTUBE_PORT};" >> $peertube_nginx_file + echo ' proxy_set_header X-Real-IP $remote_addr;' >> $peertube_nginx_file + echo ' proxy_set_header Host $host;' >> $peertube_nginx_file + echo ' proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo ' # For the video upload' >> $peertube_nginx_file + echo ' client_max_body_size 2G;' >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo ' location /static/webseed {' >> $peertube_nginx_file + echo " if (\$request_method = 'OPTIONS') {" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Origin' '*';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Headers' 'Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Max-Age' 1728000;" >> $peertube_nginx_file + echo " add_header 'Content-Type' 'text/plain charset=UTF-8';" >> $peertube_nginx_file + echo " add_header 'Content-Length' 0;" >> $peertube_nginx_file + echo ' return 204;' >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo " if (\$request_method = 'GET') {" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Origin' '*';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS';" >> $peertube_nginx_file + echo " add_header 'Access-Control-Allow-Headers' 'Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';" >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo " alias $PEERTUBE_DIR/videos;" >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '' >> $peertube_nginx_file + echo ' # Websocket tracker' >> $peertube_nginx_file + echo ' location /tracker/socket {' >> $peertube_nginx_file + echo ' # Peers send a message to the tracker every 15 minutes' >> $peertube_nginx_file + echo ' # Dont close the websocket before this time' >> $peertube_nginx_file + echo ' proxy_read_timeout 1200s;' >> $peertube_nginx_file + echo ' proxy_set_header Upgrade $http_upgrade;' >> $peertube_nginx_file + echo ' proxy_set_header Connection "upgrade";' >> $peertube_nginx_file + echo ' proxy_http_version 1.1;' >> $peertube_nginx_file + echo ' proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;' >> $peertube_nginx_file + echo ' proxy_set_header Host $host;' >> $peertube_nginx_file + echo " proxy_pass http://localhost:${PEERTUBE_PORT};" >> $peertube_nginx_file + echo ' }' >> $peertube_nginx_file + echo '}' >> $peertube_nginx_file + + # CSP currently causes an error + sed -i '/Content-Security-Policy/d' $peertube_nginx_file + + function_check create_site_certificate + create_site_certificate $PEERTUBE_DOMAIN_NAME 'yes' + + function_check nginx_ensite + nginx_ensite $PEERTUBE_DOMAIN_NAME +} + +function peertube_create_config { + peertube_config_file=$PEERTUBE_DIR/config/production.yaml + echo 'listen:' > $peertube_config_file + echo " port: $PEERTUBE_PORT" >> $peertube_config_file + echo '' >> $peertube_config_file + echo '# Correspond to your reverse proxy "listen" configuration' >> $peertube_config_file + echo 'webserver:' >> $peertube_config_file + if [[ $ONION_ONLY == 'no' ]]; then + echo ' https: true' >> $peertube_config_file + echo " hostname: '$PEERTUBE_DOMAIN_NAME'" >> $peertube_config_file + echo ' port: 443' >> $peertube_config_file + else + echo ' https: false' >> $peertube_config_file + echo " hostname: '$PEERTUBE_ONION_HOSTNAME'" >> $peertube_config_file + echo ' port: 80' >> $peertube_config_file + fi + echo '' >> $peertube_config_file + echo '# Your database name will be "peertube"+database.suffix' >> $peertube_config_file + echo 'database:' >> $peertube_config_file + echo " hostname: 'localhost'" >> $peertube_config_file + echo ' port: 5432' >> $peertube_config_file + echo " suffix: ''" >> $peertube_config_file + echo " username: 'peertube'" >> $peertube_config_file + echo " password: '$PEERTUBE_ADMIN_PASSWORD'" >> $peertube_config_file + echo '' >> $peertube_config_file + echo '# From the project root directory' >> $peertube_config_file + echo 'storage:' >> $peertube_config_file + echo " certs: 'certs/'" >> $peertube_config_file + echo " videos: 'videos/'" >> $peertube_config_file + echo " logs: 'logs/'" >> $peertube_config_file + echo " previews: 'previews/'" >> $peertube_config_file + echo " thumbnails: 'thumbnails/'" >> $peertube_config_file + echo " torrents: 'torrents/'" >> $peertube_config_file + echo " cache: 'cache/'" >> $peertube_config_file + echo '' >> $peertube_config_file + echo 'cache:' >> $peertube_config_file + echo ' previews:' >> $peertube_config_file + echo ' size: 10 # Max number of previews you want to cache' >> $peertube_config_file + echo '' >> $peertube_config_file + echo 'admin:' >> $peertube_config_file + echo " email: '$MY_EMAIL_ADDRESS'" >> $peertube_config_file + echo '' >> $peertube_config_file + echo 'signup:' >> $peertube_config_file + echo ' enabled: true' >> $peertube_config_file + echo ' limit: 2 # When the limit is reached, registrations are disabled. -1 == unlimited' >> $peertube_config_file + echo '' >> $peertube_config_file + echo 'user:' >> $peertube_config_file + echo ' # Default value of maximum video BYTES the user can upload (does not take into account transcoded files).' >> $peertube_config_file + echo ' # -1 == unlimited' >> $peertube_config_file + echo ' video_quota: -1' >> $peertube_config_file + echo '' >> $peertube_config_file + echo '# If enabled, the video will be transcoded to mp4 (x264) with "faststart" flag' >> $peertube_config_file + echo '# Uses a lot of CPU!' >> $peertube_config_file + echo 'transcoding:' >> $peertube_config_file + echo ' enabled: true' >> $peertube_config_file + echo ' threads: 2' >> $peertube_config_file + echo ' resolutions: # Only created if the original video has a higher resolution' >> $peertube_config_file + echo ' 240p: true' >> $peertube_config_file + echo ' 360p: false' >> $peertube_config_file + echo ' 480p: false' >> $peertube_config_file + echo ' 720p: false' >> $peertube_config_file + echo ' 1080p: false' >> $peertube_config_file +} + +function install_peertube { + if [ ! $ONION_ONLY ]; then + ONION_ONLY='no' + fi + + if [ ! $PEERTUBE_DOMAIN_NAME ]; then + echo $'The peertube domain name was not specified' + exit 783523 + fi + + apt-get -yq install ffmpeg + + function_check install_postgresql + install_postgresql + + if [ ! -d /var/www/$PEERTUBE_DOMAIN_NAME/htdocs ]; then + mkdir -p /var/www/$PEERTUBE_DOMAIN_NAME/htdocs + fi + + if [ -d $PEERTUBE_DIR ]; then + rm -rf $PEERTUBE_DIR + fi + + groupadd peertube + useradd -c "PeerTube system account" -d $PEERTUBE_DIR -m -r -g peertube peertube + + peertube_create_database + + function_check install_nodejs + install_nodejs peertube + + if [ -d /repos/peertube ]; then + mkdir -p $PEERTUBE_DIR + cp -r -p /repos/peertube/. $PEERTUBE_DIR + cd $PEERTUBE_DIR + git pull + else + function_check git_clone + git_clone $PEERTUBE_REPO $PEERTUBE_DIR + fi + + cd $PEERTUBE_DIR + git checkout $PEERTUBE_COMMIT -b $PEERTUBE_COMMIT + set_completion_param "peertube commit" "$PEERTUBE_COMMIT" + + npm install -g yarn + if [ ! "$?" = "0" ]; then + echo $'Failed to install yarn' + exit 79353234 + fi + yarn add -D webpack --network-concurrency 1 + yarn install + if [ ! "$?" = "0" ]; then + echo $'Failed to run yarn install' + exit 63754235 + fi + npm install + if [ ! "$?" = "0" ]; then + echo $'Failed to install peertube' + exit 7835243 + fi + npm run build + if [ ! "$?" = "0" ]; then + echo $'Failed to build peertube' + exit 5293593 + fi + + PEERTUBE_ONION_HOSTNAME=$(add_onion_service peertube 80 ${PEERTUBE_ONION_PORT}) + + echo '[Unit]' > /etc/systemd/system/peertube.service + echo 'Description=PeerTube Decentralized video streaming platform' >> /etc/systemd/system/peertube.service + echo 'After=syslog.target' >> /etc/systemd/system/peertube.service + echo 'After=network.target' >> /etc/systemd/system/peertube.service + echo '' >> /etc/systemd/system/peertube.service + echo '[Service]' >> /etc/systemd/system/peertube.service + echo 'User=peertube' >> /etc/systemd/system/peertube.service + echo 'Group=peertube' >> /etc/systemd/system/peertube.service + echo "WorkingDirectory=$PEERTUBE_DIR" >> /etc/systemd/system/peertube.service + echo "ExecStart=/usr/local/bin/npm start" >> /etc/systemd/system/peertube.service + echo "ExecStop=/usr/local/bin/npm stop" >> /etc/systemd/system/peertube.service + echo 'StandardOutput=syslog' >> /etc/systemd/system/peertube.service + echo 'StandardError=syslog' >> /etc/systemd/system/peertube.service + echo 'SyslogIdentifier=peertube' >> /etc/systemd/system/peertube.service + echo 'Restart=always' >> /etc/systemd/system/peertube.service + echo "Environment=NODE_ENV=production" >> /etc/systemd/system/peertube.service + echo '' >> /etc/systemd/system/peertube.service + echo '[Install]' >> /etc/systemd/system/peertube.service + echo 'WantedBy=multi-user.target' >> /etc/systemd/system/peertube.service + + peertube_create_config + + chown -R peertube:peertube $PEERTUBE_DIR + + peertube_setup_web + + ${PROJECT_NAME}-pass -u $MY_USERNAME -a peertube -p "$PEERTUBE_ADMIN_PASSWORD" + + function_check add_ddns_domain + add_ddns_domain $PEERTUBE_DOMAIN_NAME + + systemctl enable peertube + systemctl daemon-reload + systemctl start peertube + systemctl restart nginx + + set_completion_param "peertube domain" "$PEERTUBE_DOMAIN_NAME" + APP_INSTALLED=1 +} + +# NOTE: deliberately no exit 0 diff --git a/src/freedombone-app-smilodon b/src/freedombone-app-smilodon index 6dae0870..76724073 100755 --- a/src/freedombone-app-smilodon +++ b/src/freedombone-app-smilodon @@ -35,7 +35,7 @@ SHOW_ON_ABOUT=1 SHOW_ICANN_ADDRESS_ON_ABOUT=0 SMILODON_REPO="https://github.com/bashrc/smilodon" -SMILODON_COMMIT='e17dad10f9d4c00516b9c93a587e4298b3639af3' +SMILODON_COMMIT='18c91b84737fbb1a106d3c495730ac3261aac335' SMILODON_ADMIN_PASSWORD= SMILODON_ONION_PORT=8054 SMILODON_PATH=/etc/smilodon @@ -283,6 +283,8 @@ function install_smilodon { git checkout $SMILODON_COMMIT -b $SMILODON_COMMIT set_completion_param "smilodon commit" "$SMILODON_COMMIT" + sed -i 's|https:|http:|g' $SMILODON_PATH/api/utilities.py + groupadd smilodon useradd -c "Smilodon system account" -d $SMILODON_PATH -m -r -g smilodon smilodon @@ -346,6 +348,7 @@ function install_smilodon { echo "export smilodon_admin_address=$MY_EMAIL_ADDRESS" >> ${SMILODON_PATH}/run_smilodon.sh echo "export MAIL_SERVER='localhost'" >> ${SMILODON_PATH}/run_smilodon.sh echo "export MAIL_PORT=25" >> ${SMILODON_PATH}/run_smilodon.sh + echo "export API_NAME=$SMILODON_ONION_HOSTNAME" >> ${SMILODON_PATH}/run_smilodon.sh echo "python3 run.py" >> ${SMILODON_PATH}/run_smilodon.sh chmod +x ${SMILODON_PATH}/run_smilodon.sh chown smilodon:smilodon ${SMILODON_PATH}/run_smilodon.sh diff --git a/src/freedombone-image-customise b/src/freedombone-image-customise index 96ac6574..fc77b551 100755 --- a/src/freedombone-image-customise +++ b/src/freedombone-image-customise @@ -1616,6 +1616,7 @@ function image_preinstall_repos { git clone $TURTL_REPO $rootdir/repos/turtl git clone $KANBOARD_REPO $rootdir/repos/kanboard git clone $KEYSERVER_WEB_REPO $rootdir/repos/keyserverweb + git clone $PEERTUBE_REPO $rootdir/repos/peertube #git clone $WEKAN_REPO $rootdir/repos/wekan #git clone $FLOW_ROUTER_REPO $rootdir/repos/flowrouter #git clone $METEOR_USERACCOUNTS_REPO $rootdir/repos/meteoruseraccounts diff --git a/src/freedombone-utils-postgresql b/src/freedombone-utils-postgresql index 530a779d..b24899b7 100755 --- a/src/freedombone-utils-postgresql +++ b/src/freedombone-utils-postgresql @@ -87,6 +87,7 @@ function install_postgresql { function add_postgresql_user { postgresql_username=$1 postgresql_password=$2 + cd /etc/postgresql if [[ "$3" != 'encrypt'* ]]; then sudo -u postgres psql -c "create user $postgresql_username password '$postgresql_password';" else @@ -97,28 +98,33 @@ function add_postgresql_user { function remove_postgresql_user { postgresql_username=$1 + cd /etc/postgresql sudo -u postgres psql -c "drop user $postgresql_username" } function drop_database_postgresql { database_name="$1" + cd /etc/postgresql sudo -u postgres psql -c "drop database $database_name" } function run_system_query_postgresql { query=$1 + cd /etc/postgresql sudo -u postgres psql -c "$query" } function run_query_postgresql { database_name=$1 database_query=$2 + cd /etc/postgresql sudo -u postgres psql -d $database_name -c "$database_query" } function run_query_postgresql_with_output { database_name=$1 database_query=$2 + cd /etc/postgresql output=$(sudo -u postgres psql -d $database_name -c << EOF $database_query EOF @@ -129,6 +135,7 @@ EOF function initialise_database_postgresql { database_name=$1 database_file=$2 + cd /etc/postgresql sudo -u postgres psql $database_name < $database_file if [ ! "$?" = "0" ]; then exit 7238525 @@ -152,6 +159,7 @@ GRANT ALL PRIVILEGES ON ${app_name}.* TO '$app_admin_username@localhost'; flush privileges; quit" > $INSTALL_DIR/batch.sql chmod 600 $INSTALL_DIR/batch.sql + cd /etc/postgresql sudo -u postgres psql -d $database_name --file=$INSTALL_DIR/batch.sql shred -zu $INSTALL_DIR/batch.sql } diff --git a/website/EN/app_peertube.html b/website/EN/app_peertube.html new file mode 100644 index 00000000..cf820cc1 --- /dev/null +++ b/website/EN/app_peertube.html @@ -0,0 +1,323 @@ + + + + + + + +‎ + + + + + + + + + +
+ +
+
+
+ +
+

logo.png +

+
+
+ +
+

PeerTube

+
+ +

+This is a video hosting system similar to Mediagoblin but using webtorrent to help distribute the files to or between clients. This should be more practical for situations where a video becomes popular because the load is then spread across the network, with performance increasing with the number of nodes. +

+ +
+ +
+

peertube.jpg +

+
+
+ +
+

Installation

+
+

+Log into your system with: +

+ +
+
ssh myusername@mydomain -p 2222
+
+
+ +

+Using cursor keys, space bar and Enter key select Administrator controls and type in your password. +

+ +

+Select Add/Remove Apps then peertube. You will then be asked for a domain name and if you are using FreeDNS also the code for the domain which can be found under Dynamic DNS on the FreeDNS site (the random string from "quick cron example" which appears after update.php? and before >>). For more details on obtaining a domain and making it accessible via dynamic DNS see the FAQ. Typically the domain name you use will be a subdomain, such as video.mydomainname.net. It will need to be a domain which you have bought somewhere and own and not one of the FreeDNS subdomains, otherwise you won't be able to get a SSL/TLS certificate for it. +

+
+
+ +
+

Initial setup

+
+

+Navigate to your site and select Signup to create a new account. By default the maximum number of accounts on your system is limited to a small number so that millions of random internet users can't then begin uploading dubious content. After that it's pretty straightforward. +

+ +

+One thing to be aware of is that after you upload a video it will take quite a while to transcode, and during that time you won't be able to play it or it will hang after playing. A way to avoid this wait is to ensure that your videos are already in mp4 format when you upload them. +

+
+
+
+
+ + + +
+Back to top | E-mail me +
+
+ + diff --git a/website/EN/apps.html b/website/EN/apps.html index 4915f237..ca3a8afd 100644 --- a/website/EN/apps.html +++ b/website/EN/apps.html @@ -3,7 +3,7 @@ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> - + ‎ @@ -264,9 +264,9 @@ The base install of the system just contains an email server and Mutt client, bu -
-

CryptPad

-
+
+

CryptPad

+

Collaborate on editing documents, presentations and source code, or vote on things. All with a good level of security.

@@ -276,9 +276,9 @@ Collaborate on editing documents, presentations and source code, or vote on thin

-
-

DLNA

-
+
+

DLNA

+

Enables you to use the system as a music server which any DLNA compatible devices can connect to within your home network.

@@ -288,9 +288,9 @@ Enables you to use the system as a music server which any DLNA compatible device

-
-

Dokuwiki

-
+
+

Dokuwiki

+

A databaseless wiki system.

@@ -300,9 +300,9 @@ A databaseless wiki system.

-
-

Emacs

-
+
+

Emacs

+

If you use the Mutt client to read your email then this will set it up to use emacs for composing new mail.

@@ -312,9 +312,9 @@ If you use the Mutt client to read your email then this will set it up to use em

-
-

Etherpad

-
+
+

Etherpad

+

Collaborate on creating documents in real time. Maybe you're planning a holiday with other family members or creating documentation for a Free Software project along with other volunteers. Etherpad is hard to beat for simplicity and speed. Only users of the system will be able to access it.

@@ -324,9 +324,9 @@ Collaborate on creating documents in real time. Maybe you're planning a holiday

-
-

Friendica

-
+
+

Friendica

+

Federated social network system.

@@ -336,9 +336,9 @@ Federated social network system.

-
-

Ghost

-
+
+

Ghost

+

Modern looking blogging system.

@@ -348,9 +348,9 @@ Modern looking blogging system.

-
-

GNU Social

-
+
+

GNU Social

+

Federated social network based on the OStatus protocol. You can "remote follow" other users within the GNU Social federation.

@@ -360,9 +360,9 @@ Federated social network based on the OStatus protocol. You can "remote follo

-
-

Gogs

-
+
+

Gogs

+

Lightweight git project hosting system. You can mirror projects from Github, or if Github turns evil then just host your own projects while retaining the familiar fork-and-pull workflow. If you can use Github then you can also use Gogs.

@@ -372,9 +372,9 @@ Lightweight git project hosting system. You can mirror projects from Github, or

-
-

HTMLy

-
+
+

HTMLy

+

Databaseless blogging system. Quite simple and with a markdown-like format.

@@ -384,9 +384,9 @@ Databaseless blogging system. Quite simple and with a markdown-like format.

-
-

Hubzilla

-
+
+

Hubzilla

+

Web publishing platform with social network like features and good privacy controls so that it's possible to specify who can see which content. Includes photo albums, calendar, wiki and file storage.

@@ -396,9 +396,9 @@ Web publishing platform with social network like features and good privacy contr

-
-

Icecast media stream

-
+
+

Icecast media stream

+

Make your own internet radio station.

@@ -408,9 +408,9 @@ Make your own internet radio station.

-
-

IRC Server (ngirc)

-
+
+

IRC Server (ngirc)

+

Run your own IRC chat channel which can be secured with a password and accessible via an onion address. A bouncer is included so that you can receive messages sent while you were offline. Works with Hexchat and other popular clients.

@@ -420,18 +420,18 @@ Run your own IRC chat channel which can be secured with a password and accessibl

-
-

Jitsi Meet

-
+
+

Jitsi Meet

+

Experimental WebRTC video conferencing system, similar to Google Hangouts. This may not be fully functional, but is hoped to be in the near future.

-
-

KanBoard

-
+
+

KanBoard

+

A simple kanban system for managing projects or TODO lists.

@@ -441,9 +441,9 @@ A simple kanban system for managing projects or TODO lists.

-
-

Key Server

-
+
+

Key Server

+

An OpenPGP key server for storing and retrieving GPG public keys.

@@ -453,9 +453,9 @@ An OpenPGP key server for storing and retrieving GPG public keys.

-
-

Koel

-
+
+

Koel

+

Access your music collection from any internet connected device.

@@ -465,9 +465,9 @@ Access your music collection from any internet connected device.

-
-

Lychee

-
+
+

Lychee

+

Make your photo albums available on the web.

@@ -477,9 +477,9 @@ Make your photo albums available on the web.

-
-

Mailpile

-
+
+

Mailpile

+

Modern email client which supports GPG encryption.

@@ -489,9 +489,9 @@ Modern email client which supports GPG encryption.

-
-

Matrix

-
+
+

Matrix

+

Multi-user chat with some security and moderation controls.

@@ -501,9 +501,9 @@ Multi-user chat with some security and moderation controls.

-
-

Mediagoblin

-
+
+

Mediagoblin

+

Publicly host video and audio files so that you don't need to use YouTube/Vimeo/etc.

@@ -513,9 +513,9 @@ Publicly host video and audio files so that you don't need to use YouTube/Vimeo/

-
-

Mumble

-
+
+

Mumble

+

The popular VoIP and text chat system. Say goodbye to old-fashioned telephony conferences with silly dial codes. Also works well on mobile.

@@ -525,9 +525,9 @@ The popular VoIP and text chat system. Say goodbye to old-fashioned telephony co

-
-

NextCloud

-
+
+

NextCloud

+

Store files on your server and sync them with laptops or mobile devices. Includes many plugins including videoconferencing and collaborative document editing.

@@ -537,9 +537,21 @@ Store files on your server and sync them with laptops or mobile devices. Include

-
-

PI-Hole

-
+
+

PeerTube

+
+

+Peer-to-peer video hosting. Similar to Mediagoblin, but the P2P aspect better enables the streaming load to be shared across servers. +

+ +

+How to use it +

+
+
+
+

PI-Hole

+

The black hole for web adverts. Block adverts at the domain name level within your local network. It can significantly reduce bandwidth, speed up page load times and protect your systems from being tracked by spyware.

@@ -549,9 +561,9 @@ The black hole for web adverts. Block adverts at the domain name level within yo

-
-

Pleroma

-
+
+

Pleroma

+

Pleroma is an OStatus-compatible social networking server, compatible with GNU Social, PostActiv and Mastodon. It is high-performance and so is especially well suited for running on low power single board computers without much RAM.

@@ -561,9 +573,9 @@ Pleroma is an OStatus-compatible social networking server, compatible with GNU S

-
-

PostActiv

-
+
+

PostActiv

+

An alternative federated social networking system compatible with GNU Social, Pleroma and Mastodon. It includes some optimisations and fixes currently not available within the main GNU Social project.

@@ -573,9 +585,9 @@ An alternative federated social networking system compatible with GNU Social, Pl

-
-

Profanity

-
+
+

Profanity

+

A shell based XMPP client which you can run on the Freedombone server via ssh.

@@ -585,9 +597,9 @@ A shell based XMPP client which you can run on the Freedombone server via ssh.

-
-

Riot Web

-
+
+

Riot Web

+

A browser based user interface for the Matrix federated communications system, including WebRTC audio and video chat.

@@ -597,9 +609,9 @@ A browser based user interface for the Matrix federated communications system, i

-
-

SearX

-
+
+

SearX

+

A metasearch engine for customised and private web searches.

@@ -609,9 +621,9 @@ A metasearch engine for customised and private web searches.

-
-

tt-rss

-
+
+

tt-rss

+

Private RSS reader. Pulls in RSS/Atom feeds via Tor and is only accessible via an onion address. Have "the right to read" without the Surveillance State knowing what you're reading. Also available with a user interface suitable for viewing on mobile devices via a browser such as OrFox.

@@ -621,9 +633,9 @@ Private RSS reader. Pulls in RSS/Atom feeds via Tor and is only accessible via a

-
-

Syncthing

-
+
+

Syncthing

+

Possibly the best way to synchronise files across all of your devices. Once it has been set up it "just works" with no user intervention needed.

@@ -633,9 +645,9 @@ Possibly the best way to synchronise files across all of your devices. Once it h

-
-

Tahoe-LAFS

-
+
+

Tahoe-LAFS

+

Robust and encrypted storage of files on one or more server.

@@ -645,9 +657,9 @@ Robust and encrypted storage of files on one or more server.

-
-

Tox

-
+
+

Tox

+

Client and bootstrap node for the Tox chat/VoIP system.

@@ -657,9 +669,9 @@ Client and bootstrap node for the Tox chat/VoIP system.

-
-

Turtl

-
+
+

Turtl

+

A system for privately creating and sharing notes and images, similar to Evernote but without the spying.

@@ -669,18 +681,18 @@ A system for privately creating and sharing notes and images, similar to Evernot

-
-

Vim

-
+
+

Vim

+

If you use the Mutt client to read your email then this will set it up to use vim for composing new mail.

-
-

Virtual Private Network (VPN)

-
+
+

Virtual Private Network (VPN)

+

Set up a VPN on your server so that you can bypass local internet censorship.

@@ -690,9 +702,9 @@ Set up a VPN on your server so that you can bypass local internet censorship.

-
-

XMPP

-
+
+

XMPP

+

Chat server which can be used together with client such as Gajim or Conversations to provide end-to-end content security and also onion routed metadata security. Includes advanced features such as client state notification to save battery power on your mobile devices, support for seamless roaming between networks and message carbons so that you can receive the same messages while being simultaneously logged in to your account on more than one device.

diff --git a/website/EN/armbian.html b/website/EN/armbian.html index f36ddae5..9a461d3a 100644 --- a/website/EN/armbian.html +++ b/website/EN/armbian.html @@ -3,7 +3,7 @@ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> - + ‎ @@ -247,6 +247,12 @@ for the JavaScript code in this tag.

Installing on Armbian

+
+

+"we are the music makers, we are the dreamers of dreams. cyberpunks and pirates. chaotic spectres hauting cyberspace. engineers, artists, hackers." +

+
+

If you have a single board ARM computer which isn't one of the supported ones then you can probably still install Freedombone onto it if it has a Debian Stretch Armbian image available for it.