-if ([ 'dev', 'test'].indexOf(process.env.NODE_ENV) !== -1) {
+// FIXME: https://github.com/nodejs/node/pull/16853
+import { VideosCaptionCache } from './server/lib/cache/videos-caption-cache'
+
+require('tls').DEFAULT_ECDH_CURVE = 'auto'
+
+import { isTestInstance } from './server/helpers/core-utils'
+
+if (isTestInstance()) {
require('source-map-support').install()
}
// ----------- Node modules -----------
import * as bodyParser from 'body-parser'
import * as express from 'express'
-// FIXME: cannot import express-validator
-const expressValidator = require('express-validator')
-import * as http from 'http'
import * as morgan from 'morgan'
-import * as path from 'path'
-import * as bittorrentTracker from 'bittorrent-tracker'
-import { Server as WebSocketServer } from 'ws'
-
-const TrackerServer = bittorrentTracker.Server
+import * as cors from 'cors'
+import * as cookieParser from 'cookie-parser'
+import * as helmet from 'helmet'
process.title = 'peertube'
// Create our main app
const app = express()
-// ----------- Database -----------
-// Do not use barels because we don't want to load all modules here (we need to initialize database first)
-import { logger } from './server/helpers/logger'
-import { API_VERSION, CONFIG } from './server/initializers/constants'
-// Initialize database and models
-import { database as db } from './server/initializers/database'
-db.init(false, onDatabaseInitDone)
+// ----------- Core checker -----------
+import { checkMissedConfig, checkFFmpeg, checkConfig, checkActivityPubUrls } from './server/initializers/checker'
-// ----------- Checker -----------
-import { checkMissedConfig, checkFFmpeg, checkConfig } from './server/initializers/checker'
+// Do not use barrels because we don't want to load all modules here (we need to initialize database first)
+import { logger } from './server/helpers/logger'
+import { API_VERSION, CONFIG, STATIC_PATHS, CACHE } from './server/initializers/constants'
const missed = checkMissedConfig()
if (missed.length !== 0) {
- throw new Error('Miss some configurations keys : ' + missed)
+ logger.error('Your configuration files miss keys: ' + missed)
+ process.exit(-1)
}
-checkFFmpeg(function (err) {
- if (err) {
- throw err
- }
-})
+
+checkFFmpeg(CONFIG)
+ .catch(err => {
+ logger.error('Error in ffmpeg check.', { err })
+ process.exit(-1)
+ })
const errorMessage = checkConfig()
if (errorMessage !== null) {
throw new Error(errorMessage)
}
+// Trust our proxy (IP forwarding...)
+app.set('trust proxy', CONFIG.TRUST_PROXY)
+
+// Security middlewares
+app.use(helmet({
+ frameguard: {
+ action: 'deny' // we only allow it for /videos/embed, see server/controllers/client.ts
+ },
+ dnsPrefetchControl: {
+ allow: true
+ },
+ contentSecurityPolicy: {
+ directives: {
+ defaultSrc: ['*', 'data:', 'wss:', 'https:'],
+ fontSrc: ["'self'", 'data:'],
+ frameSrc: ["'none'"],
+ mediaSrc: ['*', 'https:'],
+ objectSrc: ["'none'"],
+ scriptSrc: ["'self'", "'unsafe-inline'", "'unsafe-eval'"],
+ styleSrc: ["'self'", "'unsafe-inline'"],
+ upgradeInsecureRequests: true
+ },
+ browserSniff: false // assumes a modern browser, but allows CDN in front
+ },
+ referrerPolicy: {
+ policy: 'strict-origin-when-cross-origin'
+ }
+}))
+app.use((_, res, next) => {
+ [
+ "vibrate 'none'",
+ "geolocation 'none'",
+ "camera 'none'",
+ "microphone 'none'",
+ "magnetometer 'none'",
+ "payment 'none'",
+ "accelerometer 'none'"
+ ].forEach(e => res.append('Feature-Policy', e + ';'))
+ next()
+})
+
+// ----------- Database -----------
+
+// Initialize database and models
+import { initDatabaseModels } from './server/initializers/database'
+import { migrate } from './server/initializers/migrator'
+migrate()
+ .then(() => initDatabaseModels(false))
+ .then(() => startApplication())
+ .catch(err => {
+ logger.error('Cannot start application.', { err })
+ process.exit(-1)
+ })
+
// ----------- PeerTube modules -----------
-import { migrate, installApplication } from './server/initializers'
-import { JobScheduler, activateSchedulers } from './server/lib'
-import * as customValidators from './server/helpers/custom-validators'
-import { apiRouter, clientsRouter, staticRouter } from './server/controllers'
+import { installApplication } from './server/initializers'
+import { Emailer } from './server/lib/emailer'
+import { JobQueue } from './server/lib/job-queue'
+import { VideosPreviewCache } from './server/lib/cache'
+import {
+ activityPubRouter,
+ apiRouter,
+ clientsRouter,
+ feedsRouter,
+ staticRouter,
+ servicesRouter,
+ webfingerRouter,
+ trackerRouter,
+ createWebsocketServer
+} from './server/controllers'
+import { Redis } from './server/lib/redis'
+import { BadActorFollowScheduler } from './server/lib/schedulers/bad-actor-follow-scheduler'
+import { RemoveOldJobsScheduler } from './server/lib/schedulers/remove-old-jobs-scheduler'
+import { UpdateVideosScheduler } from './server/lib/schedulers/update-videos-scheduler'
// ----------- Command line -----------
// ----------- App -----------
+// Enable CORS for develop
+if (isTestInstance()) {
+ app.use(cors({
+ origin: '*',
+ exposedHeaders: 'Retry-After',
+ credentials: true
+ }))
+}
+
// For the logger
app.use(morgan('combined', {
- stream: { write: logger.info }
+ stream: { write: logger.info.bind(logger) }
}))
// For body requests
-app.use(bodyParser.json({ limit: '500kb' }))
app.use(bodyParser.urlencoded({ extended: false }))
-// Validate some params for the API
-app.use(expressValidator({
- customValidators: customValidators
+app.use(bodyParser.json({
+ type: [ 'application/json', 'application/*+json' ],
+ limit: '500kb'
}))
+// Cookies
+app.use(cookieParser())
// ----------- Views, routes and static files -----------
const apiRoute = '/api/' + API_VERSION
app.use(apiRoute, apiRouter)
-// Client files
-app.use('/', clientsRouter)
+// Services (oembed...)
+app.use('/services', servicesRouter)
+
+app.use('/', activityPubRouter)
+app.use('/', feedsRouter)
+app.use('/', webfingerRouter)
+app.use('/', trackerRouter)
// Static files
app.use('/', staticRouter)
-// Always serve index client page (the client is a single page application, let it handle routing)
-app.use('/*', function (req, res, next) {
- res.sendFile(path.join(__dirname, '../client/dist/index.html'))
-})
-
-// ----------- Tracker -----------
-
-const trackerServer = new TrackerServer({
- http: false,
- udp: false,
- ws: false,
- dht: false
-})
-
-trackerServer.on('error', function (err) {
- logger.error(err)
-})
-
-trackerServer.on('warning', function (err) {
- logger.error(err)
-})
-
-const server = http.createServer(app)
-const wss = new WebSocketServer({ server: server, path: '/tracker/socket' })
-wss.on('connection', function (ws) {
- trackerServer.onWebSocketConnection(ws)
-})
+// Client files, last valid routes!
+app.use('/', clientsRouter)
// ----------- Errors -----------
})
app.use(function (err, req, res, next) {
- logger.error(err)
- res.sendStatus(err.status || 500)
+ let error = 'Unknown error.'
+ if (err) {
+ error = err.stack || err.message || err
+ }
+
+ logger.error('Error in controller.', { error })
+ return res.status(err.status || 500).end()
})
+const server = createWebsocketServer(app)
+
// ----------- Run -----------
-function onDatabaseInitDone () {
+async function startApplication () {
const port = CONFIG.LISTEN.PORT
- // Run the migration scripts if needed
- migrate(function (err) {
- if (err) throw err
+ const hostname = CONFIG.LISTEN.HOSTNAME
- installApplication(function (err) {
- if (err) throw err
+ await installApplication()
- // ----------- Make the server listening -----------
- server.listen(port, function () {
- // Activate the communication with friends
- activateSchedulers()
+ // Check activity pub urls are valid
+ checkActivityPubUrls()
+ .catch(err => {
+ logger.error('Error in ActivityPub URLs checker.', { err })
+ process.exit(-1)
+ })
- // Activate job scheduler
- JobScheduler.Instance.activate()
+ // Email initialization
+ Emailer.Instance.init()
+ await Emailer.Instance.checkConnectionOrDie()
- logger.info('Server listening on port %d', port)
- logger.info('Webserver: %s', CONFIG.WEBSERVER.URL)
- })
- })
+ await JobQueue.Instance.init()
+
+ // Caches initializations
+ VideosPreviewCache.Instance.init(CONFIG.CACHE.PREVIEWS.SIZE, CACHE.PREVIEWS.MAX_AGE)
+ VideosCaptionCache.Instance.init(CONFIG.CACHE.VIDEO_CAPTIONS.SIZE, CACHE.VIDEO_CAPTIONS.MAX_AGE)
+
+ // Enable Schedulers
+ BadActorFollowScheduler.Instance.enable()
+ RemoveOldJobsScheduler.Instance.enable()
+ UpdateVideosScheduler.Instance.enable()
+
+ // Redis initialization
+ Redis.Instance.init()
+
+ // Make server listening
+ server.listen(port, hostname, () => {
+ logger.info('Server listening on %s:%d', hostname, port)
+ logger.info('Web server: %s', CONFIG.WEBSERVER.URL)
})
}
projects / oweals / peertube.git / blobdiff