support/doc/docker.md

   1 # Docker guide
   2
   3 This guide requires [docker](https://www.docker.com/community-edition) and
   4 [docker-compose](https://docs.docker.com/compose/install/).
   5
   6 ## Production
   7
   8 ### Install
   9
  10 **PeerTube does not support webserver host change**. Keep in mind your domain
  11 name is definitive after your first PeerTube start.
  12
  13 #### Go to your workdir
  14
  15 _note_: the guide that follows assumes an empty workdir, but you can also clone the repository, use the master branch and `cd support/docker/production`.
  16
  17 ```shell
  18 cd /your/peertube/directory
  19 ```
  20
  21 #### Get the latest Compose file
  22
  23 ```shell
  24 curl https://raw.githubusercontent.com/chocobozzz/PeerTube/develop/support/docker/production/docker-compose.yml > docker-compose.yml
  25 ```
  26
  27 View the source of the file you're about to download: [docker-compose.yml](https://github.com/Chocobozzz/PeerTube/blob/develop/support/docker/production/docker-compose.yml)
  28
  29 #### Get the latest env_file
  30
  31 ```shell
  32 curl https://raw.githubusercontent.com/Chocobozzz/PeerTube/develop/support/docker/production/.env > .env
  33 ```
  34
  35 View the source of the file you're about to download: [.env](https://github.com/Chocobozzz/PeerTube/blob/develop/support/docker/production/.env)
  36
  37 #### Tweak the `docker-compose.yml` file there according to your needs
  38
  39 ```shell
  40 $EDITOR ./docker-compose.yml
  41 ```
  42
  43 #### Then tweak the `.env` file to change the environment variables settings
  44
  45 ```shell
  46 $EDITOR ./.env
  47 ```
  48
  49 In the downloaded example [.env](https://github.com/Chocobozzz/PeerTube/blob/develop/support/docker/production/.env), you must replace:
  50 - `<MY POSTGRES USERNAME>`
  51 - `<MY POSTGRES PASSWORD>`
  52 - `<MY DOMAIN>` without 'https://'
  53 - `<MY EMAIL ADDRESS>`
  54
  55 Other environment variables are used in
  56 [/support/docker/production/config/custom-environment-variables.yaml](https://github.com/Chocobozzz/PeerTube/blob/develop/support/docker/production/config/custom-environment-variables.yaml) and can be
  57 intuited from usage.
  58
  59 #### Webserver
  60
  61 *The docker compose file includes a configured web server. You can skip this part and comment the appropriate section in the docker compose if you use another webserver/proxy.*
  62
  63 Install the template that the nginx container will use.
  64 The container will generate the configuration by replacing `${WEBSERVER_HOST}` and `${PEERTUBE_HOST}` using your docker compose env file.
  65
  66 It will also generate a TLS certificate at startup and schedule a renew
  67
  68 ```shell
  69 mkdir -p docker-volume/nginx
  70 curl https://raw.githubusercontent.com/Chocobozzz/PeerTube/develop/support/nginx/peertube > docker-volume/nginx/peertube
  71 ```
  72
  73 You need to manually generate the first SSL/TLS certificate using Let's Encrypt:
  74
  75 ```shell
  76 mkdir -p docker-volume/certbot
  77 docker run -it --rm --name certbot -p 80:80 -v "$(pwd)/docker-volume/certbot/conf:/etc/letsencrypt" certbot/certbot certonly --standalone
  78 ```
  79
  80 The docker-compose will automatically renew this certificate and reload nginx.
  81
  82
  83 #### Test your setup
  84
  85 Run your containers:
  86
  87 ```shell
  88 docker-compose up
  89 ```
  90
  91 ### Obtaining your automatically-generated admin credentials
  92
  93 Now that you've installed your PeerTube instance you'll want to grep your peertube container's logs for the `root` password. You're going to want to run `docker-compose logs peertube | grep -A1 root` to search the log output for your new PeerTube's instance admin credentials which will look something like this.
  94
  95 ```bash
  96 $ docker-compose logs peertube | grep -A1 root
  97
  98 peertube_1  | [example.com:443] 2019-11-16 04:26:06.082 info: Username: root
  99 peertube_1  | [example.com:443] 2019-11-16 04:26:06.083 info: User password: abcdefghijklmnop
 100 ```
 101
 102 ### Obtaining Your Automatically Generated DKIM DNS TXT Record
 103
 104 [DKIM](https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail) signature sending and RSA keys generation are enabled by the default Postfix image `mwader/postfix-relay` with [OpenDKIM](http://www.opendkim.org/).
 105
 106 Run `cat ./docker-volume/opendkim/keys/*/*.txt` to display your DKIM DNS TXT Record containing the public key to configure to your domain :
 107
 108 ```bash
 109 $ cat ./docker-volume/opendkim/keys/*/*.txt
 110
 111 peertube._domainkey.mydomain.tld.       IN      TXT     ( "v=DKIM1; h=sha256; k=rsa; "
 112           "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dx7wLGPFVaxVQ4TGym/eF89aQ8oMxS9v5BCc26Hij91t2Ci8Fl12DHNVqZoIPGm+9tTIoDVDFEFrlPhMOZl8i4jU9pcFjjaIISaV2+qTa8uV1j3MyByogG8pu4o5Ill7zaySYFsYB++cHJ9pjbFSC42dddCYMfuVgrBsLNrvEi3dLDMjJF5l92Uu8YeswFe26PuHX3Avr261n"
 113           "j5joTnYwat4387VEUyGUnZ0aZxCERi+ndXv2/wMJ0tizq+a9+EgqIb+7lkUc2XciQPNuTujM25GhrQBEKznvHyPA6fHsFheymOuB763QpkmnQQLCxyLygAY9mE/5RY+5Q6J9oDOQIDAQAB" )  ; ----- DKIM key peertube for mydomain.tld
 114 ```
 115
 116 ### Administrator password
 117
 118 See the production guide ["Administrator" section](https://docs.joinpeertube.org/#/install-any-os?id=administrator)
 119
 120 ### What now?
 121
 122 See the production guide ["What now" section](https://docs.joinpeertube.org/#/install-any-os?id=what-now).
 123
 124 ### Upgrade
 125
 126 **Important:** Before upgrading, check you have all the `storage` fields in your [production.yaml file](https://github.com/Chocobozzz/PeerTube/blob/develop/support/docker/production/config/production.yaml).
 127
 128 Pull the latest images and rerun PeerTube:
 129
 130 ```shell
 131 $ cd /your/peertube/directory
 132 $ docker-compose pull
 133 $ docker-compose up -d
 134 ```
 135
 136 ## Build your own Docker image
 137
 138 ```shell
 139 $ git clone https://github.com/chocobozzz/PeerTube /tmp/peertube
 140 $ cd /tmp/peertube
 141 $ docker build . -f ./support/docker/production/Dockerfile.buster
 142 ```
 143
 144 ## Development
 145
 146 We don't have a Docker image for development. See [the CONTRIBUTING guide](https://github.com/Chocobozzz/PeerTube/blob/develop/.github/CONTRIBUTING.md#develop) for more information on how you can hack PeerTube!