matty/peertube-plugin-livechat
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

New option to use and configure Prosody mod_firewall WIP (#97):

Browse Source 
* new setting
* new configuration screen for Peertube admins
* include the mod_firewall module
* load mod_firewall if enabled
* sys admin can disable the firewall config editing by creating a
  special file on the disk
* user documentation
This commit is contained in:
John Livingston
2024-08-12 18:17:31 +02:00
parent 481f265a44
commit 8e99199f29
76 changed files with 7577 additions and 300 deletions
Download Patch File Download Diff File Expand all files Collapse all files

105
support/documentation/po/livechat.nl.po
View File

@ -6,7 +6,7 @@
msgid ""
msgstr ""
"Project-Id-Version: peertube-plugin-livechat-documentation VERSION\n"
"POT-Creation-Date: 2024-08-12 12:08+0200\n"
"POT-Creation-Date: 2024-08-13 10:29+0200\n"
"PO-Revision-Date: 2023-07-17 10:52+0000\n"
"Last-Translator: Anonymous <noreply@weblate.org>\n"
"Language-Team: Dutch <https://weblate.framasoft.org/projects/peertube-livechat/peertube-plugin-livechat-documentation/nl/>\n"
@ -1856,6 +1856,98 @@ msgstr ""
msgid "Admin documentation"
msgstr ""
#. type: Yaml Front Matter Hash Value: description
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, no-wrap
msgid "Advanced firewall rules for the Prosody server"
msgstr ""
#. type: Yaml Front Matter Hash Value: title
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, no-wrap
msgid "Prosody mod_firewall"
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#: build/documentation/pot_in/documentation/user/streamers/moderation.md
#: support/documentation/content/en/documentation/user/streamers/moderation_notes.md
msgid "This feature comes with the livechat plugin version 11.0.0."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#: build/documentation/pot_in/documentation/admin/settings.md
msgid "You can enable [mod_firewall](https://modules.prosody.im/mod_firewall) on your Prosody server."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "Doing so, Peertube admins will be able to define advanced firewall rules."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "These rules could be used to run arbitrary code on the server. If you are a hosting provider, and you don't want to allow Peertube admins to write such rules, you can disable the online editing by creating a `disable_mod_firewall_editing` file in the plugin directory (`plugins/data/peertube-plugin-livechat/disable_mod_firewall_editing`). This is opt-out, as Peertube admins can already run arbitrary code just by installing any plugin. You can still use mod_firewall by editing files directly on the server."
msgstr ""
#. type: Title ##
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, no-wrap
msgid "Edit rules"
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "First, you must enable the feature in the [plugin settings](/peertube-plugin-livechat/documentation/admin/settings)."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "Just bellow the settings, you will find a \"Configure mod_firewall\" button. This button will open a configuration page."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "![Mod_firewall configuration](/peertube-plugin-livechat/images/mod_firewall.png?classes=shadow,border&height=400px)"
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "Here you can add several configuration files."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "You can enable/disable each files."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "Files will be loaded in the alphabetical order. You can use a number as prefix to easily choose the order."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "You can also edit these firewall rules directly on the server, in the `plugins/data/peertube-plugin-livechat/prosody/mod_firewall_config/` directory. File names must only contains alphanumerical characters, underscores and hyphens. The extension must be `.pfw`, or `.pfw.disabled` if you want to disable a file. Please be sure that the peertube system user has write access to these files, else the web editing interface will fail."
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "When you save the configuration, the server will automatically reload it, and your rules will apply immediatly. You can check that there is no parsing error in the Prosody error log. To do so, you can read the `plugins/data/peertube-plugin-livechat/prosody/prosody.err` file, or use the [diagnostic tool](/peertube-plugin-livechat/documentation/installation/troubleshooting/) that will show last Prosody errors."
msgstr ""
#. type: Title ##
#: support/documentation/content/en/documentation/admin/mod_firewall.md
#, no-wrap
msgid "Examples"
msgstr ""
#. type: Plain text
#: support/documentation/content/en/documentation/admin/mod_firewall.md
msgid "Don't hesitate to share your rules. To do so, you can for example edit this [page](/peertube-plugin-livechat/contributing/document/#write-documentation)."
msgstr ""
#. type: Yaml Front Matter Hash Value: description
#: build/documentation/pot_in/documentation/admin/settings.md
#, no-wrap
@ -2125,6 +2217,11 @@ msgstr ""
msgid "More informations on Prosody external components [here](https://prosody.im/doc/components)."
msgstr ""
#. type: Plain text
#: build/documentation/pot_in/documentation/admin/settings.md
msgid "For more information, please check [the documentation](/peertube-plugin-livechat/documentation/admin/mod_firewall/)."
msgstr ""
#. type: Yaml Front Matter Hash Value: description
#: support/documentation/content/en/documentation/_index.md
#, no-wrap
@ -3336,12 +3433,6 @@ msgstr ""
msgid "You can promote users as moderators, if you need some help."
msgstr ""
#. type: Plain text
#: build/documentation/pot_in/documentation/user/streamers/moderation.md
#: support/documentation/content/en/documentation/user/streamers/moderation_notes.md
msgid "This feature comes with the livechat plugin version 11.0.0."
msgstr ""
#. type: Plain text
#: build/documentation/pot_in/documentation/user/streamers/moderation.md
msgid "It is possible to anonymize moderation actions, to avoid disclosing who is banning/kicking/… occupants."