Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- ubuntu:airsonic [2021/10/10 10:45] – [Java JRE] 11 Sebastian Hetzel
+++ ubuntu:airsonic [2021/10/30 16:50] (aktuell) – [Transcoder] angelegt Sebastian Hetzel
@@ Zeile 34: / Zeile 34: @@
 OpenJDK Runtime Environment (build 1.8.0_292-8u292-b10-0ubuntu1~20.04-b10)
 OpenJDK 64-Bit Server VM (build 25.292-b10, mixed mode)
+</code>
+==== Transcoder ====
+<code>
+# aptitude install ffmpeg
+</code>
+Falls der Ordner noch nicht vorhanden sein sollte, bitte anlegen:
+<code>
+# mkdir /srv/airsonic/transcode
+</code>
+Nachsehen, wo die ffmpeg liegt:
+<code>
+#  whereis ffmpeg
+ffmpeg: /usr/bin/ffmpeg /usr/share/ffmpeg /usr/share/man/man1/ffmpeg.1.gz
+</code>
+Nun geben wir der Applikation Zugriff auf den Transcoder:
+<code>
+# cd /srv/airsonic/transcode
+# ln -s /usr/bin/ffmpeg
+# chown -h airsonic.airsonic ffmpeg
 </code>
 ==== Optionale Tools ====
@@ Zeile 57: / Zeile 84: @@
 # chown -R airsonic:airsonic /srv/airsonic
 </code>
+Nun die Verzeichnisse für die Musiksammlung:
+<code>
+# cd /srv
+# mkdir PLAYLISTS
+# chown -R airsonic.airsonic PLAYLISTS/
+# mkdir ALBEN
+# chown -R airsonic.airsonic ALBEN/
+</code>
+==== Die Anwendung als Dienst implementieren ====
+Bei Airsonic:
+<code>
+# wget https://raw.githubusercontent.com/airsonic/airsonic/master/contrib/airsonic.service -O /etc/systemd/system/airsonic.service
+# wget https://raw.githubusercontent.com/airsonic/airsonic/master/contrib/airsonic-systemd-env -O /etc/default/airsonic
+# wget -c https://github.com/airsonic/airsonic/releases/download/v10.6.2/airsonic.war
+# cp airsonic.war /srv/airsonic
+# systemctl daemon-reload
+# systemctl start airsonic.service
+# systemctl enable airsonic.service
+</code>
+Bei Airsonic Advanced:
+<code>
+# wget https://raw.githubusercontent.com/airsonic-advanced/airsonic-advanced/master/contrib/airsonic.service -O /etc/systemd/system/airsonic.service
+# wget https://raw.githubusercontent.com/airsonic/airsonic/master/contrib/airsonic-systemd-env -O /etc/default/airsonic
+# wget -c https://github.com/airsonic-advanced/airsonic-advanced/releases/download/11.0.0-SNAPSHOT.20211007145752/airsonic.war
+# cp airsonic.war /srv/airsonic
+# systemctl daemon-reload
+# systemctl start airsonic.service
+# systemctl enable airsonic.service
+</code>
+Innerhalb der airsonic.service muss der Pfad für ''EnvironmentFile'' an die Gegebenheiten in Ubuntu angepasst werden.
+<file |bash /etc/systemd/system/airsonic.service>
+[Unit]
+Description=Airsonic Media Server
+After=remote-fs.target network.target
+AssertPathExists=/var/airsonic
+[Service]
+Type=simple
+Environment="JAVA_JAR=/var/airsonic/airsonic.war"
+Environment="JAVA_OPTS=-Xmx700m"
+Environment="AIRSONIC_HOME=/var/airsonic"
+Environment="PORT=8080"
+Environment="CONTEXT_PATH=/airsonic"
+Environment="JAVA_ARGS="
+EnvironmentFile=-/etc/default/airsonic
+ExecStart=/usr/bin/java \
+          $JAVA_OPTS \
+          -Dairsonic.home=${AIRSONIC_HOME} \
+          -Dserver.servlet.context-path=${CONTEXT_PATH} \
+          -Dserver.port=${PORT} \
+          -jar ${JAVA_JAR} $JAVA_ARGS
+User=airsonic
+Group=airsonic
+# See https://www.freedesktop.org/software/systemd/man/systemd.exec.html
+# for details
+DevicePolicy=closed
+NoNewPrivileges=yes
+PrivateDevices=yes
+PrivateTmp=yes
+PrivateUsers=yes
+ProtectControlGroups=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictNamespaces=yes
+RestrictRealtime=yes
+SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap
+ReadWritePaths=/var/airsonic
+# You can change the following line to `strict` instead of `full`
+# if you don't want airsonic to be able to
+# write anything on your filesystem outside of AIRSONIC_HOME.
+ProtectSystem=full
+# You can uncomment the following line if you don't have any media
+# in /home/…. This will prevent airsonic from ever reading/writing anything there.
+#ProtectHome=true
+# You can uncomment the following line if you're not using the OpenJDK.
+# This will prevent processes from having a memory zone that is both writeable
+# and executeable, making hacker's lifes a bit harder.
+#MemoryDenyWriteExecute=yes
+[Install]
+WantedBy=multi-user.target
+</file>
+===== Reverse Proxy =====
+Airsonic Advanced nutzt Websockets. Entsprechend muss der Proxy dies unterstützen!
+==== Apache ====
+=== Installation ===
+<code>
+# aptitude install apache2
+# a2enmod proxy proxy_http headers proxy_wstunnel rewrite ssl
+# a2dismod status
+</code>
+=== Virtuelle Hosts anlegen ===
+<code>
+# cd /var/www
+# mkdir airsonic
+# mkdir -p airsonic/html
+# mkdir -p airsonic/logs
+</code>
+<file | /etc/apache2/sites-available/airsonic.conf>
+<VirtualHost *:80>
+    ServerName domain.de
+    ServerAlias www.domain.de v3.domain.de
+    DocumentRoot /var/www/airsonic/html
+    Redirect 301 / https://v3.domain.de/
+    ErrorLog /var/www/airsonic/logs/error.log
+    CustomLog /var/www/airsonic/logs/access.log combined
+</VirtualHost>
+<VirtualHost *:80>
+    ServerName domain.rocks
+    ServerAlias www.domain.rocks v3.domain.rocks
+    DocumentRoot /var/www/airsonic/html
+    Redirect 301 / https://v3.domain.rocks/
+    ErrorLog /var/www/airsonic/logs/error.log
+    CustomLog /var/www/airsonic/logs/access.log combined
+</VirtualHost>
+<VirtualHost *:80>
+    ServerName domain.net
+    ServerAlias www.domain.net v3.domain.net
+    DocumentRoot /var/www/airsonic/html
+    Redirect 301 / https://v3.domain.net/
+    ErrorLog /var/www/airsonic/logs/error.log
+    CustomLog /var/www/airsonic/logs/access.log combined
+</VirtualHost>
+</file>
+Nun für HTTPS. Ich bereite die Konfiguration vor, noch bevor LE diese erstellt.
+<file | /etc/apache2/sites-enabled/airsonic-le-ssl.conf>
+<IfModule mod_ssl.c>
+SSLStaplingCache shmcb:/var/run/apache2/stapling_cache(128000)
+<VirtualHost *:443>
+        ServerName domain.de
+        ServerAlias v3.domain.de www.domain.de
+        DocumentRoot /var/www/airsonic/html
+        ErrorLog /var/www/airsonic/logs/error.log
+        CustomLog /var/www/airsonic/logs/access.log combined
+        ProxyPass / http://127.0.0.1:4040/
+        ProxyPassReverse / http://127.0.0.1:4040/
+        RequestHeader     set       X-Forwarded-Proto "https"
+        #websocket proxying
+        RewriteEngine on
+        RewriteCond %{HTTP:Upgrade} websocket [NC]
+        RewriteCond %{HTTP:Connection} upgrade [NC]
+        RewriteRule ^/?(.*) "ws://127.0.0.1:4040/$1" [P,L]
+        Header always unset X-Frame-Options
+        Include /etc/letsencrypt/options-ssl-apache.conf
+        Header always set Strict-Transport-Security "max-age=31536000"
+        SSLUseStapling on
+        SSLCertificateFile      /etc/letsencrypt/live/v3.domain.de/fullchain.pem
+        SSLCertificateKeyFile /etc/letsencrypt/live/v3.domain.de/privkey.pem
+</VirtualHost>
+</IfModule>
+</file>
+Virtuellen Host aktivieren:
+<code>
+# a2ensite airsonic
+</code>
+Damit der Server SSL sprechen kann, muss der Cerbot von Let's Encrypt installiert werden. Eine Anleitung habe ich hier bereits hinterlegt:
+>[[https://wiki.sebastianhetzel.net/ubuntu:apache_webserver#https_mit_let_s_encrypt|Installation Let's Encrypt]]