New option to use and configure Prosody mod_firewall WIP (#97):

* new setting
* new configuration screen for Peertube admins
* include the mod_firewall module
* load mod_firewall if enabled
* sys admin can disable the firewall config editing by creating a
  special file on the disk
* user documentation
This commit is contained in:
John Livingston
2024-08-12 18:17:31 +02:00
parent 481f265a44
commit 8e99199f29
76 changed files with 7577 additions and 300 deletions

View File

@ -7,7 +7,7 @@
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2024-08-12 12:08+0200\n"
"POT-Creation-Date: 2024-08-13 10:29+0200\n"
"PO-Revision-Date: 2024-08-07 07:41+0000\n"
"Last-Translator: Victor Hampel <v.hampel@users.noreply.weblate.framasoft.org>\n"
"Language-Team: German <https://weblate.framasoft.org/projects/peertube-livechat/peertube-plugin-livechat-documentation/de/>\n"
@ -1921,6 +1921,105 @@ msgstr "Plugin Peertube Livechat Administation"
msgid "Admin documentation"
msgstr "Admin Dokumentation"
#. type: Yaml Front Matter Hash Value: description
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, no-wrap
msgid "Advanced firewall rules for the Prosody server"
msgstr ""
#. type: Yaml Front Matter Hash Value: title
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, no-wrap
msgid "Prosody mod_firewall"
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#: build/documentation/pot_in/documentation/user/streamers/moderation.md
#: support/documentation/content/en/documentation/user/streamers/moderation_notes.md
msgid "This feature comes with the livechat plugin version 11.0.0."
msgstr "Diese Funktion wird mit dem Livechatplugin Version 11.0.0 verfügbar sein."
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#: build/documentation/pot_in/documentation/admin/settings.md
msgid "You can enable [mod_firewall](https://modules.prosody.im/mod_firewall) on your Prosody server."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "Doing so, Peertube admins will be able to define advanced firewall rules."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "These rules could be used to run arbitrary code on the server. If you are a hosting provider, and you don't want to allow Peertube admins to write such rules, you can disable the online editing by creating a `disable_mod_firewall_editing` file in the plugin directory (`plugins/data/peertube-plugin-livechat/disable_mod_firewall_editing`). This is opt-out, as Peertube admins can already run arbitrary code just by installing any plugin. You can still use mod_firewall by editing files directly on the server."
msgstr ""
#. type: Title ##
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, fuzzy, no-wrap
#| msgid "Edit tasks"
msgid "Edit rules"
msgstr "Aufgaben bearbeiten"
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, fuzzy
#| msgid "Check the help for [this setting](/peertube-plugin-livechat/documentation/admin/settings/) for more information."
msgid "First, you must enable the feature in the [plugin settings](/peertube-plugin-livechat/documentation/admin/settings)."
msgstr "Weitere Informationen finden Sie in der Hilfe für [diese Einstellung](/peertube-plugin-livechat/de/documentation/admin/settings/)."
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "Just bellow the settings, you will find a \"Configure mod_firewall\" button. This button will open a configuration page."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, fuzzy
#| msgid "![Timers configuration](/peertube-plugin-livechat/images/bot_quotes.png?classes=shadow,border&height=200px)"
msgid "![Mod_firewall configuration](/peertube-plugin-livechat/images/mod_firewall.png?classes=shadow,border&height=400px)"
msgstr "[Konfiguration der Timer](/peertube-plugin-livechat/images/bot_quotes.png?classes=shadow,border&height=200px)"
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, fuzzy
#| msgid "Here you can configure:"
msgid "Here you can add several configuration files."
msgstr "Hier können Sie konfigurieren:"
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "You can enable/disable each files."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "Files will be loaded in the alphabetical order. You can use a number as prefix to easily choose the order."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "You can also edit these firewall rules directly on the server, in the `plugins/data/peertube-plugin-livechat/prosody/mod_firewall_config/` directory. File names must only contains alphanumerical characters, underscores and hyphens. The extension must be `.pfw`, or `.pfw.disabled` if you want to disable a file. Please be sure that the peertube system user has write access to these files, else the web editing interface will fail."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "When you save the configuration, the server will automatically reload it, and your rules will apply immediatly. You can check that there is no parsing error in the Prosody error log. To do so, you can read the `plugins/data/peertube-plugin-livechat/prosody/prosody.err` file, or use the [diagnostic tool](/peertube-plugin-livechat/documentation/installation/troubleshooting/) that will show last Prosody errors."
msgstr ""
#. type: Title ##
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, no-wrap
msgid "Examples"
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "Don't hesitate to share your rules. To do so, you can for example edit this [page](/peertube-plugin-livechat/contributing/document/#write-documentation)."
msgstr ""
#. type: Yaml Front Matter Hash Value: description
#: build/documentation/pot_in/documentation/admin/settings.md
#, no-wrap
@ -2193,6 +2292,13 @@ msgstr "Diese Funktion könnte für die Verbindung von Brücken oder Bots genutz
msgid "More informations on Prosody external components [here](https://prosody.im/doc/components)."
msgstr "Weitere Informationen zu den externen Komponenten von Prosody finden Sie [hier](https://prosody.im/doc/components)."
#. type: Plain text
#: build/documentation/pot_in/documentation/admin/settings.md
#, fuzzy
#| msgid "For the user documentation, see [user documentation](/peertube-plugin-livechat/documentation/user/viewers/)"
msgid "For more information, please check [the documentation](/peertube-plugin-livechat/documentation/admin/mod_firewall/)."
msgstr "Für die Benutzerdokumentation, siehe [Benutzerdokumentation](/peertube-plugin-livechat/de/documentation/user/viewers/)"
#. type: Yaml Front Matter Hash Value: description
#: support/documentation/content/en/documentation/_index.md
#, no-wrap
@ -3417,12 +3523,6 @@ msgstr "Es gibt verschiedene Rollen, die Benutzern in Chaträumen zugewiesen wer
msgid "You can promote users as moderators, if you need some help."
msgstr "Sie können Benutzer zu Moderatoren befördern, wenn Sie Hilfe benötigen."
#. type: Plain text
#: build/documentation/pot_in/documentation/user/streamers/moderation.md
#: support/documentation/content/en/documentation/user/streamers/moderation_notes.md
msgid "This feature comes with the livechat plugin version 11.0.0."
msgstr "Diese Funktion wird mit dem Livechatplugin Version 11.0.0 verfügbar sein."
#. type: Plain text
#: build/documentation/pot_in/documentation/user/streamers/moderation.md
#, fuzzy