Files
computer-playbook/roles/web-app-peertube
Kevin Veen-Birkenbach 57d5269b07 CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers
- Add CSP3 support for style/script: include -elem and -attr directives
- Base (style-src, script-src) now unions elem/attr (CSP2/Safari fallback)
- Respect explicit base disables (e.g. style-src.unsafe-inline: false)
- Hashes only when 'unsafe-inline' absent in the final base tokens
- Nginx: set CSP only for HTML/worker via header_filter_by_lua_block; drop for subresources
- Remove per-location header_filter; keep body_filter only
- Update app role flags to *-attr where appropriate; extend desktop CSS sources
- Add comprehensive unit tests for union/explicit-disable/no-mirror-back

Ref: https://chatgpt.com/share/68f87a0a-cebc-800f-bb3e-8c8ab4dee8ee
2025-10-22 13:53:06 +02:00
..

PeerTube

Description

PeerTube is a decentralized, opensource video hosting platform that empowers creators to share videos without relying on centralized services. It leverages federated architecture and peer-to-peer technologies to provide scalable, secure, and communitydriven video streaming.

Overview

This Docker Compose deployment sets up PeerTube with integrated support for essential services such as a PostgreSQL database, Redis cache, and an Nginx reverse proxy for secure HTTPS termination and domain routing. The configuration supports advanced security settings, modular service scaling, and automated environment injection.

Core Software Features

  • Decentralized Video Hosting:
    Distribute video hosting across multiple instances to enhance resilience and avoid singlepoint control.

  • Scalability and Performance:
    Efficiently manage video transcoding, live streaming, and storage through containerized microservices.

  • Customizable Configuration:
    Tailor settings such as storage, email delivery, and administrative parameters using environment variables and configuration files.

  • Secure and Private:
    Builtin support for TLS, secure SMTP integration, and strict administrative controls to ensure data protection.

  • Federated Communication:
    Designed to operate within a federated network, enabling seamless sharing and interconnection with other PeerTube instances.

Documentation & Administration

  • Administration.md
    Contains manual operations for container management, configuration updates, and administrative commands.

  • Upgrade.md
    Provides guidance for upgrading your PeerTube deployment.

Other Resources

Credits

Developed and maintained by Kevin Veen-Birkenbach
Learn more at www.veen.world