Быстрая установка Peertube Docker Debian 13

curl -fsSL https://get.docker.com | sudo sh

sudo systemctl enable --now docker

sudo usermod -aG docker ИмяПользователя

mkdir /home/media/peertube

cd /home/media/peertube

services:
  peertube:
    # If you don't want to use the official image and build one from sources:
    # build:
    #   context: .
    #   dockerfile: ./support/docker/production/Dockerfile.bookworm
    image: chocobozzz/peertube:production-bookworm
    # Use a static IP for this container because nginx does not handle proxy host change without reload
    # This container could be restarted on crash or until the postgresql database is ready for connection
    networks:
      default:
        ipv4_address: 172.18.0.42
#        ipv6_address: 2001:db8:2::42
    env_file:
      - .env
    environment:
      - TZ=Europe/Moscow

    ports:
     - "1935:1935" # Comment if you don't want to use the live feature
     - "9000:9000" # Uncomment if you use another webserver/proxy or test PeerTube in local, otherwise not suitable for production
    volumes:
      # Remove the following line if you want to use another webserver/proxy or test PeerTube in local
      - assets:/app/client/dist
      - ./docker-volume/data:/data
      - ./docker-volume/config:/config
    depends_on:
      - postgres
      - redis
      - postfix
    restart: "always"

  postgres:
    image: postgres:13-alpine
    env_file:
      - .env
    environment:
      - TZ=Europe/Moscow
    volumes:
      - ./docker-volume/db:/var/lib/postgresql/data
    restart: "always"

  redis:
    image: redis:6-alpine
    environment:
      - TZ=Europe/Moscow
    volumes:
      - ./docker-volume/redis:/data
    restart: "always"

  postfix:
    image: mwader/postfix-relay
    env_file:
      - .env
    environment:
      - TZ=Europe/Moscow
    volumes:
      - ./docker-volume/opendkim/keys:/etc/opendkim/keys
    restart: "always"

networks:
  default:
#    enable_ipv6: false
    ipam:
      driver: default
      config:
      - subnet: 172.18.0.0/16
#      - subnet: 2001:db8:2::/64
volumes:
  assets:
  certbot-www:

# Database / Postgres service configuration
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
# Postgres database name "peertube"
POSTGRES_DB=peertube
# The database name used by PeerTube will be PEERTUBE_DB_NAME (only if set) *OR* 'peertube'+PEERTUBE_DB_SUFFIX
#PEERTUBE_DB_NAME=<MY POSTGRES DB NAME>
#PEERTUBE_DB_SUFFIX=_prod
# Database username and password used by PeerTube must match Postgres', so they are copied:
PEERTUBE_DB_USERNAME=$POSTGRES_USER
PEERTUBE_DB_PASSWORD=$POSTGRES_PASSWORD
PEERTUBE_DB_SSL=false
# Default to Postgres service name "postgres" in docker-compose.yml
PEERTUBE_DB_HOSTNAME=postgres

# PeerTube server configuration
# If you test PeerTube in local: use "peertube.localhost" and add this domain to your host file resolving on 127.0.0.1
PEERTUBE_WEBSERVER_HOSTNAME=video.wildserver.ru
# If you just want to test PeerTube on local
PEERTUBE_WEBSERVER_PORT=443
PEERTUBE_WEBSERVER_HTTPS=true
# If you need more than one IP as trust_proxy
# pass them as a comma separated array:
PEERTUBE_TRUST_PROXY=["127.0.0.1", "192.168.30.0/24"]

# Generate one using `openssl rand -hex 32`
PEERTUBE_SECRET=Вставить_сгенерированный_код

# E-mail configuration
# If you use a Custom SMTP server
PEERTUBE_SMTP_USERNAME=noreply@wildserver.ru
PEERTUBE_SMTP_PASSWORD=Пароль_от_аккаунта_почты
# Default to Postfix service name "postfix" in docker-compose.yml
# May be the hostname of your Custom SMTP server
PEERTUBE_SMTP_HOSTNAME=mail.sudakova.net
PEERTUBE_SMTP_PORT=25
PEERTUBE_SMTP_FROM=noreply@wildserver.ru
PEERTUBE_SMTP_TLS=false
PEERTUBE_SMTP_DISABLE_STARTTLS=false
PEERTUBE_ADMIN_EMAIL=admin@wildserver.ru

<VirtualHost *:80>
    ServerName video.wildserver.ru
    ServerAlias www.video.wildserver.ru

    ServerAdmin admin@wildserver.ru
    ErrorLog ${APACHE_LOG_DIR}/video.wildserver.ru.error.log
    CustomLog ${APACHE_LOG_DIR}/video.wildserver.ru.access.log combined

    RewriteEngine on
    RewriteCond %{HTTPS} off
    RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
</VirtualHost>

<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName video.wildserver.ru
    ServerAlias www.video.wildserver.ru

    ServerAdmin admin@wildserver.ru
    ErrorLog ${APACHE_LOG_DIR}/video.wildserver.ru.error.log
    CustomLog ${APACHE_LOG_DIR}/video.wildserver.ru.access.log combined

    Protocols h2 h2c http/1.1

    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLProxyEngine on
    SSLCertificateFile /etc/letsencrypt/live/video.wildserver.ru/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/video.wildserver.ru/privkey.pem

    # Современные SSL-шифры
    SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
    SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256
    SSLHonorCipherOrder on
    SSLSessionTickets off
    SSLUseStapling on

    # Безопасность
    Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
    Header always set X-Frame-Options SAMEORIGIN
    Header always set X-Content-Type-Options nosniff
    Header always set Referrer-Policy no-referrer-when-downgrade
    Header always set X-XSS-Protection "1; mode=block"
    Header always set Content-Security-Policy "default-src https: data: 'unsafe-inline' 'unsafe-eval'"

    ProxyPreserveHost On
    ProxyRequests Off
    RequestHeader set X-Forwarded-Proto "https"

    ProxyTimeout 900
    KeepAliveTimeout 10
    ProxyReceiveBufferSize 0

    # PeerTube backend
    ProxyPass "/" "http://192.168.30.33:9000/" enablereuse=on flushpackets=on keepalive=on upgrade=websocket
    ProxyPassReverse "/" "http://192.168.30.33:9000/"

    # Ограничение размера запросов
    <LocationMatch "^/api/v1/videos/(upload|([^/]+/studio/edit))$">
        Require all granted
        <LimitExcept POST HEAD>
            Require all denied
        </LimitExcept>
        LimitRequestBody 12884901888
        Header set X-File-Maximum-Size 8G
    </LocationMatch>

    # API доступ
    <Location /api/v1/users/me>
        Header set Access-Control-Allow-Origin "*"
        Header set Access-Control-Allow-Methods "GET, POST, OPTIONS"
        Header set Access-Control-Allow-Headers "Authorization, Content-Type"
    </Location>

    # Раздача статики напрямую
    DocumentRoot /home/media/peertube
    Alias /client /home/media/peertube/peertube-latest/client/dist
    <Directory "/home/media/peertube/peertube-latest/client/dist">
        Header set Cache-Control "public, max-age=31536000, immutable"
    </Directory>
</VirtualHost>
</IfModule>

vm.overcommit_memory = 1
net.core.somaxconn=511

UPDATE "user" 
SET "otpSecret" = NULL 
WHERE username = 'root';
\q