Différences

Ci-dessous, les différences entre deux révisions de la page.

--- projets:vroom [19/02/2015 18:24]
dani [Setup VROOM]
+++ projets:vroom [31/05/2017 15:08] (Version actuelle)
dani [Demo]
@@ Ligne 1: / Ligne 1: @@
 ====== VROOM ======
+{{odt>template:template_fws.odt}}
+<note important>This page is obsolete. Please see the new documentation page instead here: https://vroom.fws.fr/documentation</note>
 ===== Intro =====
@@ Ligne 34: / Ligne 37: @@
 ===== Demo =====
-Better than a few screenshots, you can try it: https://vroom.im/ (no registration needed). The administration page isn't accessible on the demo, so here are a few screenshots:
+Better than a few screenshots, you can try it: https://vroom.fws.fr/ (no registration needed). The administration page isn't accessible on the demo, so here are a few screenshots:
 {{ :projets:vroom_admin_list.png |The admin page lists all existing rooms}}
@@ Ligne 117: / Ligne 120: @@
 <code bash>
-yum install git nodejs npm tar wget httpd mod_ssl openssl telnet mariadb-server \
+yum install git tar wget httpd mod_ssl openssl mariadb-server \
            'perl(Mojolicious)' 'perl(Mojolicious::Plugin::I18N)' 'perl(Mojolicious::Plugin::Mail)' \
            'perl(Crypt::SaltedHash)' 'perl(Etherpad::API)' 'perl(LWP::Protocol::https)' \
@@ Ligne 136: / Ligne 139: @@
 === Setup MySQL/MariaDB ===
-A database will be used to share informations between the various components. Will configure it first.
+A database will be used to store rooms configuration, we must enable the server.
 <code bash>
 systemctl enable mariadb.service
@@ Ligne 179: / Ligne 181: @@
 mysql-userdb "host=localhost dbname=vroom user=vroom password=MySuperPassw0rd connect_timeout=5"
 verbose
+syslog
 fingerprint
 lt-cred-mech
 no-sslv2
+no-sslv3
+no-tcp
+no-udp
+tls-listening-port 5349
+alt-tls-listening-port 3478
 no-loopback-peers
-realm firewall-services.com
+no-multicast-peers
-cert /etc/pki/tls/certs/xxx.firewall-services.com.crt
+realm vroom
-pkey /etc/pki/tls/private/xxx.firewall-services.com.key
+cert /etc/turnserver/cert.pem
+pkey /etc/turnserver/key.pem
 proc-user turnserver
 proc-group turnserver
@@ Ligne 192: / Ligne 201: @@
 <note important>
-An SSL certificate is needed for everything to work correctly (**/etc/pki/tls/certs/xxx.firewall-services.com.crt** and **/etc/pki/tls/private/xxx.firewall-services.com.key** in this example). For personal use or testing, you can use a self signed certificate. Both key and certificate must be readable by turnserver user and/or group
+  * An SSL certificate is needed for everything to work correctly and securely (**/etc/turnserver/cert.pem** and **/etc/turnserver/key.pem** in this example)
+  * Both key and certificate must be readable by turnserver user and/or group
+  * You can comment no-tcp, no-udp and alt-tls-listening-port if you want to test without encryption
+  * If you have intermediate(s) CA, you have to put them in the cert.pem file, but **after** your certificate
 </note>
@@ Ligne 245: / Ligne 257: @@
 </note>
-=== Setup SignalMaster ===
-This daemon is a slightly modified version of [[https://github.com/andyet/signalmaster|SignalMaster]] from &yet (the only modification is to check client auth before the handshake). To install it:
-<code bash>
-cd /opt/vroom/signalmaster
-npm install
-</code>
-Ok, now lets create a user to run this
-<code bash>
-useradd -r signalmaster
-</code>
-Lets configure signalmaster:
-<code bash>
-cat <<'EOF' > /opt/vroom/signalmaster/dev_config.json
-{
-    "isDev": false,
-    "server": {
-        "port": 8888
-    },
-    "mysql": {
-        "server": "localhost",
-        "database": "vroom",
-        "user": "vroom",
-        "password": "MySuperPassw0rd"
-    }
-}
-EOF
-</code>
-Now, lets add our unit file so systemd will be able to manage this daemon:
-<code bash>
-cp /opt/vroom/conf/signalmaster.service /etc/systemd/system/
-systemctl daemon-reload
-systemctl enable signalmaster
-systemctl start signalmaster
-</code>
-<note important>In this how-to, the signaling server will be accessible only through Apache which will act as a proxy, so it's recommanded **not** to open the port 8888 from the outside</note>
 === Setup Apache ===